Business Security Consultant (CNAPP)

EY • Washington, DC

62d • $128,100 - $272,300 • Hybrid

About The Position

EY Infosec is seeking a cloud security consultant with expertise in cloud security architecture, configuration, and governance across Microsoft Azure, including subject matter expertise in Cloud Native Application Protection Platform (CNAPP) technology and its integration into development, release, and operational practices. This hands-on role guides, implements, and maintains the security of cloud services and infrastructure, leading enablement of CNAPP technology and applying secure deployment practices to identify and mitigate risks for business applications hosted in Azure. Familiarity with GCP and AWS is also desirable.

The consultant will drive the full lifecycle enablement of the Wiz CNAPP platform across a growing portfolio of applications and infrastructure hosted in Azure. Working within a DevSecOps model, the role enables automated security testing and compliance, vulnerability management, and risk reduction. It also advises project teams on security design, development, and implementation for complex global applications using Azure and the broader Microsoft technology stack.

This is an individual-contributor role supporting multiple project teams, rather than a program management or oversight position. The consultant collaborates with product owners, architects, developers, DevOps, and information security teams to design, implement, and certify security controls. The role calls for knowledge of IT architectures and cloud technology, as well as supporting security technologies and practices including SAST and DAST, IAM, network security, firewalls, audit and logging, ISO 27001, OWASP, third-party security assessments, SOC 1 and SOC 2 reports, and vendor risk management.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 10+ years of experience as a Cloud Security Engineer or Architect working with Wiz or similar CNAPP platforms and capabilities.
• Enterprise-level hands-on experience with Wiz or similar CNAPP capabilities, including CSPM, CWPP, vulnerability scanning, compliance assessments, and DevSecOps integration.
• Familiarity with CI/CD tools such as GitHub, GitLab, or Azure DevOps, and infrastructure as code such as Terraform or CloudFormation.
• Scripting and automation experience with Rego, Python, or TypeScript, along with APIs, webhooks, and event pipelines.
• Strong understanding of DevSecOps principles and practices.
• Excellent communication, presentation, and collaboration skills.
• Knowledge of cloud security architecture, configuration, and governance across Microsoft Azure.
• Knowledge of relevant security frameworks and standards, including CIS Benchmarks, NIST 800-53, NIST 800-190, ISO 27001/27002, and SOC 2.
• Knowledge of cloud security supporting technologies and concepts, including SAST, DAST, IAM, network security, firewalls, audit and logging, OWASP, third-party security assessments, SOC 1 and SOC 2 reports, and vendor risk management.

Nice To Haves

• Familiarity with other cloud platforms such as GCP and AWS.
• CISSP, GIAC, or Azure Security Engineer certification.
• Knowledge of data classification requirements such as GDPR or CCPA.
• Container and Kubernetes security experience, including EKS or AKS.

Responsibilities

• Serve as a subject matter expert to advance EY’s cloud security posture using Wiz CNAPP across Azure.
• Guide Wiz integration to support risk-based remediation with product and DevOps teams, and automate guardrails that maintain compliance and resilience.
• Drive implementation of existing and new Wiz features and develop CNAPP capabilities within EY.
• Develop, tune, and enforce cloud and containerized-workload security policies, requirements, standards, and procedures, including for Kubernetes clusters and orchestration solutions.
• Collaborate with cross-functional teams to shift security left, including IaC scanning and approve/deny policies in CI/CD, and integrate security practices into the SDLC and CI/CD pipelines.
• Develop and implement security automation to continuously monitor cloud environments for compliance, threats, and performance anomalies.
• Automate ingestion of security defects and vulnerability findings into Jira or ServiceNow.
• Conduct cloud security assessments, vulnerability scans, and threat modeling; identify, evaluate, and mitigate cloud infrastructure risks using automated or customized methods.
• Work with security architects, engineers, developers, product owners, and other teams to develop scalable approaches to automate, monitor, and improve security across cloud platforms.
• Partner with Security Operations and incident response teams to investigate and remediate security incidents, providing cloud attack-vector and mitigation expertise.
• Generate dashboards and executive metrics for assigned products and services, including risk reduction, SLA adherence, and coverage; report security risks, incidents, and findings to leadership and stakeholders.
• Collaborate with stakeholders to define project scope, deliverables, and expectations in alignment with business objectives.
• Identify gaps in security tools and services and collaborate with development teams on custom security solutions when needed.
• Advise project teams on security design, development, implementation, and certification of controls for complex global applications.

Benefits

• Medical coverage
• Dental coverage
• Pension plan
• 401(k) plan
• Flexible vacation policy
• EY Paid Holidays
• Winter and Summer breaks
• Personal and Family Care time off
• Other leaves of absence to support physical, financial, and emotional well-being

What This Job Offers

• Job Type: Full-time
• Career Level: Senior