Security Engineer

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

STS Lab Security Engineer The Opportunity The EY Security Technology Services (STS) Lab is the innovation and engineering engine behind EY's global cybersecurity platform — responsible for building, testing, integrating, and continuously improving the security tooling that protects one of the world's largest professional services organizations. As a Monitoring & AI Protection Engineer at the Assistant Director level within the STS Lab team in GDS India, you will be the hands-on technical owner of EY's 3rd party security tooling ecosystem — spanning Zscaler, Qualys, Wiz, CSPM platforms, and their integrations into EY's broader security architecture. You will own the engineering, configuration, integration, and continuous improvement of these platforms, ensuring they operate as cohesive, well-governed components of EY's Monitoring & AI Protection capability. This is a hands-on, senior engineering role with direct influence over how EY's security posture is monitored, assessed, and protected across multi-cloud environments. You will work closely with the STS Lab Lead, Cloud Platform Security Architects, and SMEs across IAM, Defender XDR, Sentinel, and the broader Monitoring & AI Protection team to translate platform capabilities into actionable security outcomes at enterprise scale.   Your Key Responsibilities

3rd Party Platform Engineering — Own end-to-end engineering, configuration, and lifecycle management of Zscaler (ZIA/ZPA/ZDX), Qualys (VMDR/WAS/CS), Wiz, and CSPM tooling across multi-cloud environments. Integration Architecture — Design and implement integrations between 3rd party tools and EY's core security stack (Microsoft Sentinel, Defender XDR, Event Hubs, REST APIs), ensuring unified visibility and alerting across the security platform. Engineer and maintain Cloud Security Posture Management capabilities; define and enforce policy frameworks, benchmark mappings (CIS, NIST, PCI-DSS), and remediation workflows across Azure, AWS, and GCP. Vulnerability & Exposure Management — Configure and manage scanning infrastructure, asset inventory, and reporting pipelines; integrate vulnerability findings into downstream risk and remediation workflows. Monitoring & Alerting Pipelines — Build and maintain log ingestion pipelines from 3rd party tools into Microsoft Sentinel and Log Analytics Workspaces; develop KQL-based detection rules, dashboards, and workbooks. Automation & Tooling — Develop Python/PowerShell automation scripts and GitHub Actions workflows to streamline platform operations, policy deployment, and integration tasks. Lab Environment Testing — Build and maintain STS Lab environments to evaluate new 3rd party tooling capabilities, proof-of-concept integrations, and product updates prior to production deployment. Documentation & Runbooks — Produce and maintain clear engineering documentation, integration runbooks, configuration standards, and operational guides for global distribution.

Skills and Attributes for Success

Deep, hands-on experience engineering and administering 3rd party security platforms in large enterprise, multi-cloud environments. Strong command of at least two of the following: Zscaler (ZIA/ZPA), Qualys (VMDR/WAS), Wiz, or equivalent CSPM tooling — with demonstrable integration experience. Solid understanding of CSPM principles: cloud misconfiguration detection, compliance benchmarking, and posture remediation workflows. Familiarity with SIEM integration patterns: log connectors, API-based ingestion, Event Hub pipelines, and KQL for detection and investigation. Understanding of Zero Trust