Security Engineer – Data Protection and Security Management

Job description

Security Engineer
EY Technology:

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day.  Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients.  Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.

 

EY Technology supports our technology needs through three business units:

 

Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY toidentify new technology-based opportunities faster, and pursue those opportunities more rapidly.

 

Enterprise Workplace Technology (EWT) – EWTsupports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. EWT will also support our internal technology needs by focusing on a better user experience.

 

Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.  

The opportunity

As a Security Engineer, for Data Protection and Vulnerability Management, in the Security Technology Services Engineering group, you will be working in a team responsible for the design, engineering, implementation and early life cycle support of security services across the EY Global environment.  The Security Engineer will work closely with Security Architects, Service Delivery, Security Operations, and Cyber Défense to support the enablement of security services.  These services will be handed over to the Security Operations teams once early life cycle is ended and all relevant documentation is provided.  Additionally, you will provide consulting services to other teams, and act as a level four escalation point for operational issues.

 

Your key responsibilities
· 
User behaviour analytics (UBA) - examine patterns and apply algorithms and statistical analysis to detect meaningful anomalies from those patterns; anomalies that indicate potential threats.

· 
Build technology solutions following all relevant EY standards and practices for both on premise and cloud-based solutions.

· 
Responsible for the design, build, testing of new security solutions and completion of technical security deliverables and documentation.

· 
Provides engineering support for existing technologies and services.

· 
Able to make technical decisions in support of Architecture, Operations, Strategy and Service Delivery functions within a project and escalated troubleshooting contexts.

· 
Offers technical expertise and insight; driving direct improvements and remediation of services and technologies where needed.

· 
Ability to work in a diverse, global environment.  Builds strong relationships across all levels of a matrixed, geographically and culturally dispersed organization utilizing advanced oral and written English communication skills.

· 
Drives automation and innovation across the security technologies supported.

· 
Ability to work out of regular office hours to accommodate the global team and organizational calls and meetings

· 
Weekend or late-night work may occur during project and early life support phases 

· 
Some travel may be required

Skills and attributes for success
· 
Strong organizational skills, self-motivated and able to work to tight deadlines

· 
Strong work ethic with the ability to work without daily direct supervision

· 
Strong analytical and problem-solving skills

· 
Effective teaming and knowledge sharing skills

· 
Advanced skills in planning, designing and troubleshooting complex security environments

· 
At least 3 years of hands on experience in designing and implementing at least one or more of the following security solutions or similar technologies including:

·  Hadoop
· 
Splunk (or similar SIEM)

· 
Securonix (or similar UBA technology)

· 
In depth knowledge across varying security disciplines such as:

· 
WebInspect, Qualys (or similar Vulnerability & Security management tooling)

· 
Vormetric Transparent Encryption, Azure Key Vault (or similar Encryption technology)

· 
Netskope, Microsoft CAS (or similar CASB)

· 
Symantec DLP (or similar DLP technology)

· 
Strong ability to document processes, procedures and security designs clearly and accurately for distribution to internal teams and customers

· 
Understanding of other technologies required to run an enterprise level infrastructure

· 
Demonstrated experience in dealing with external vendors and suppliers in the security industry

To qualify for the role you must have
· 
Degree in Computer Science or a related discipline, or equivalent work experience required

· 
Have at least 5 years of Information Security experience

· 
Have at least 3 years of experience in an engineering function

· 
Experience working with Hadoop, Splunk or Securonix

· 
Experience with the development of automated searches and applications

· 
Experience working in a global, virtual environment

· 
Strong English language skills are required – written and verbal

· 
Excellent interpersonal, communication and presentation skills

· 
Good time management, organizational, and decision-making skills

· 
Good judgment, tact, and decision-making ability

· 
Ability to work in a diverse, multi-cultural, global environment

Ideally, you’ll also have
· 
Technical experience in a large, complex, global IT environment

· 
Involved in large scale global IT deployments

· 
At least one security related professional certification is desired (CISSP, CISM, GIAC)

What we look for
· 
Security enthusiast

· 
Self-motivated with an aptitude to learn quickly

· 
Ability to deal with Ambiguity