Support development teams in secure coding practices, vulnerability remediation, and code reviews.
Work on DevSecOps pipeline implementation and optimization using enterprise and open-source tools.
Assist in threat modeling exercises (e.g., STRIDE) and secure design reviews.
Develop scripts and automation for security testing, reporting, and tool integration.
Collaborate with DevOps and cloud teams to implement security controls in cloud environments (AWS/Azure/GCP).
Analyze security findings and create detailed reports with risks, exploitation scenarios, and remediation steps.
Support adoption of container security, IaC security, and compliance-as-code practices.
Contribute to AI-assisted security use cases, such as automated triaging, code analysis, and developer productivity tools.
Stay current with emerging security threats, vulnerabilities, and DevSecOps trends.
Skills and Attributes for Success
Strong hands-on experience in application security testing (SAST, DAST, SCA).
Experience working with CI/CD pipelines and DevOps tools (Jenkins, Azure DevOps, GitHub/GitLab).
Proficiency in scripting/programming (Python, PowerShell, Java, etc.).
Familiarity with DAST tools (Burp Suite, WebInspect, AppScan), SAST,SCA tools (Checkmarx, Fortify, Veracode, Coverity), Container security tools (Aqua, Invicti etc.), Secret scanning tools (GHAS Git Guardian etc.).
Understanding of OWASP Top 10 and secure coding practices.
Experience with cloud platforms (AWS/Azure/GCP) and basic cloud security concepts.
Exposure to container technologies and security tools (Docker, Kubernetes).
Understanding of DevSecOps practices and SSDLC frameworks (OWASP SAMM, NIST SSDF).
Hands-on experience with SCM tools (GitHub, GitLab, Bitbucket) and pipeline integrations.
Good understanding of threat modeling concepts (e.g., STRIDE).
Exposure to AI/ML or GenAI tools in development/security workflows (e.g., AI-assisted code analysis, automation).
Strong problem-solving skills and ability to work in cross-functional teams.
To qualify for the role, you must have
BE/ B.Tech/ MCA.
Certifications: Mandatory to have any one of the below certifications,
Azure Security Architect (Az-500)
AWS security speciality certification (SCS-C01)
Knowledge of Windows, Linux, UNIX, any other major operating systems.
Strong Excel and PowerPoint skills.
Ideally, you’ll also have
Project management skills
Certifications: CSSLP, Certified DevSecOps Professional
What we look for
A candidate who can build a complete CI/CD pipeline from scratch, prepare, and work around a maturity model and optimize the pipeline to integrate the best tools according to the client requirement.
What working at EY offers
At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.
You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:
Support, coaching and feedback from some of the most engaging colleagues around
Opportunities to develop new skills and progress your career
The freedom and flexibility to handle your role in a way that’s right for you
About EY
As a global leader in Assurance, Tax, Strategy & transactions and Consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.
Apply now »
Apply now
Start applying with LinkedIn
Apply Now
Start
Please wait...
Find similar jobs
- Consulting DE,
- Consulting CN,
- Consulting CA,
- Consulting BR,
- Consulting
Connect with us
Our locations
My EY
Site map
Legal and privacy
Labor condition applications
Cookie Consent Manager
Opens in a new tab.
Opens in a new tab.
Opens in a new tab.
Opens in a new tab.
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×
Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies
Show More Details
Required Cookies
- Provider
- Description
- Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:
"route" is used for session stickiness
"careerSiteCompanyId" is used to send the request to the correct data center
"JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
"Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another
Cookies from provider SAPasserviceprovider are required and cannot be turned off
Advertising Cookies
These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.
Consent to all Advertising Cookies
Show More Details
Advertising Cookies
- Provider
- Description
- Enabled
AddThis
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.
Cookie Information
Privacy Policy
Terms and Conditions
Consent to cookies from provider AddThis
LinkedIn
LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn.
Cookie Policy
Cookie Table
Privacy Policy
Terms and Conditions
Consent to cookies from provider LinkedIn
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.
Cookie Information
Privacy Policy
Terms and Conditions
Consent to cookies from provider GoogleAnalytics
Google Tag Manager
Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing, and more.
Privacy Policy
Terms and Conditions
Consent to cookies from provider GoogleTagManager
Confirm My Choices
- Reject All Cookies
- Accept All Cookies
