TC-CS-Cyber Architecture-OT and Engineering-API Security-Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Job Description 

Security Software Dev Engineer - Python – Shared Security Services Engineering

Security Software Dev Engineer contributes to the development of horizontal enterprise level security solutions built by “Shared Security Services Engineering” Team.
As a member of the team, you will own and be responsible for delivering key workstreams of "Secure by Default” initiative to secure applications & APIs both at design and at runtime. You will also contribute to building reusable software solutions that improve the security posture of applications by offloading security concerns from application developers, protect data from accidental exposure, utilize AI to detect and identify threats and building mitigating controls to protect Client’s assets.

Key Responsibilities and Duties

• Hands on development experience to build scalable, highly secure, and high performant solutions
• Develop security solutions and platforms related to Application, API and Platform security
• Contribute to team charter, strategy, and roadmap to realize business objectives
• Have bias towards action, challenge status quo, research and implement latest technologies to streamline architecture
• Have strong collaboration skills to define requirements, influence design decisions and evangelize adoption of solutions
• Create quick proof of concepts to solve critical problems and highlight value

Work Experience

• 5+ Years Required

Technology: Python, AWS, AWS Lambda, GCP, Kubernetes, ISTIO Service Mesh

Mandatory Skills:

• Well versed with Agile development practices
• 5+ years of experience in building highly performant applications using Python
• Experience in building reusable python modules that can be leveraged by other application developers
• Design and Development experience in building web applications and APIs
• Expertise in debugging performance issues with code, identify security issues and bugs
• Strong understanding of API access patterns (B2B, B2C etc) and Authentication & Authorization controls using OAuth (OAuth, HMAC etc)
• Good understanding of secure design and development practices including shift-left strategy using SAST & DAST
• Experience working on one or more cloud platforms such as AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform

Preferred Skills:

• Contribute to one or more open source projects
• Understanding of cryptographic algorithms including symmetric and asymmetric encryption
• Strong understanding of API access patterns (B2B, B2C etc) and Authentication & Authorization controls using OAuth (OAuth, HMAC etc)
• Good understanding of secure design and development practices including shift-left strategy using SAST & DAST

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.