Cyber SDC - Application Security Engineer - Senior - Consulting - Location Open

EY is a global leader in assurance, consulting, tax, and transactions, and they are seeking a Senior Application Security Engineer. In this role, you will be responsible for managing application development platforms and optimizing security tools to ensure secure and efficient application deployment.

Responsibilities:

• Assist in the operations of Application Security and development tools, including Rally, GitHub, SonarQube, GitHub Advanced Security JFrog Artifactory, Xray, and Tines for automation
• Configure, handle, patch, and update self-hosted versions of Artifactory, SonarQube, and GitHub monthly to ensure security and performance
• Collaborate with the AppSec Lead to create and resolve operational tickets related to these tools, ensuring effective support for client needs
• Maintain and update Amazon Machine Images (AMIs) to the latest versions each month for optimal security and functionality
• Contribute to the creation and updating of operational metrics for weekly client meetings, providing insights into tool performance and operational efficiency
• Work closely with cross-functional teams to support the enhancement of application security practices and processes

Requirements:

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field
• Extensive experience in application security practices and tools
• Hand on experience on cloud patching and updates
• Experience with scripting languages (e.g., Python, Bash) for automation of tasks
• Knowledge of Windows, Linux, Unix, any other major operating systems
• 2-4 years of experience with cloud platforms, particularly AWS, and familiarity with CI/CD pipelines
• Experience in managing the Application security and development tools
• Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc
• Strong ability to listen to and understand client needs, building rapport and delivering effective solutions
• Ability to identify, escalate, and manage risks, enhancing service delivery and client satisfaction
• Proficient in producing high-quality documentation, reports, and presentations, ensuring adherence to quality standards
• Skilled at working within diverse, cross-functional teams, including those that are geographically dispersed
• Strong analytical skills with the ability to interpret complex information and communicate it effectively
• Active interest in staying updated on the latest cybersecurity threats and trends, promoting continual learning and adaptation