Vulnerability Analyst

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Supervising Associate – Container Security SME

Role Summary

The Container Security Subject Matter Expert (SME) supports Vulnerability Management across EY by helping manage the full vulnerability lifecycle for containerized environments.

This role requires strong practical knowledge of container and Kubernetes security, including hands-on expertise with Aqua Security (AquaSec), as well as experience with Wiz and Kubernetes-as-a-Service (KaaS) environments.

The candidate will act as a key technical resource for Container Vulnerability Management, partnering Operations, Engineering, KaaS DevOps, application teams, and other stakeholders to identify, analyze, triage, communicate, track, and support remediation of security vulnerabilities affecting containerized environments.

The role combines technical expertise, vulnerability management, stakeholder coordination, metrics and reporting, risk-based prioritization, and continuous service improvement.

Key Responsibilities

• Manage end-to-end vulnerability management activities across the lifecycle for containerized environments, including containers, container images, registries, Kubernetes clusters, and related cloud-native infrastructure.
• Track and report remediation progress, vulnerability aging, SLA adherence, exceptions, and risk acceptance items.
• Use container security tools such as AquaSec and Wiz to assess, monitor, and support remediation of container-related vulnerabilities.
• Serve as the Container Security SME by providing technical guidance and advisory support for vulnerability remediation in containerized environments.
• Identify automation opportunities that improve the efficiency, consistency, and effectiveness of container security operations.
• Analyze vulnerability data to develop metrics that provide actionable vulnerability intelligence and exposure visibility across container environments.
• Engage closely with application, DevSecOps, cloud, and platform engineering teams to drive remediation of vulnerabilities in container images and runtime environments.
• Correlate vulnerability data with asset ownership, image lineage, deployment context, internet exposure, and business criticality to support risk-based prioritization.
• Support executive and operational reporting on container security posture, remediation trends, high-risk vulnerabilities, and open risk items.
• Contribute to process documentation, playbooks, metrics, dashboards, and continuous improvement initiatives for container vulnerability management.
  
  

Preferred Skills

• Experience with Grafana and KQL (Kusto Query Language) is highly desirable.
  
  

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.