Senior Cyber Incident Response & Forensics

EY; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

EY is seeking a Senior in Cyber Incident Response within Forensic & Integrity Services in Hong Kong. You will join a team that helps clients respond to cyber incidents, investigate breaches, preserve evidence, and coordinate recovery efforts with technology, legal and risk stakeholders.

The role offers exposure to ransomware, data exfiltration, insider threats, and broad incident scenarios, with opportunities to develop practical digital forensics, incident response, and client deliverables

Qualifications

• 2–5 years in cyber incident response or related fields.
• Experience with ransomware, data breaches or unauthorized access.
• Experience in digital forensic investigations and evidence handling.
• Ability to produce investigation reports and stakeholder updates.
• Experience collaborating with Information Security, Technology, Risk, Legal, Compliance.

Responsibilities

• Support cyber incident response engagements including breaches and data exfiltration.
• Assist live incidents with situation assessment, tracking and coordination.
• Contribute to digital forensic investigations and evidence collection.
• Perform forensic analyses across endpoints, servers, cloud, and devices.
• Prepare incident reports, briefings and client deliverables.
• Coordinate with Legal, Risk, Compliance, Communications and other functions.
• Support post-incident reviews and lessons learned.
• Manage workstreams to deliver engagements on time.

Skills

Cyber incident response

Digital forensics

Cyber investigations

Information security

Stakeholder management

Communication skills

Analytical skills

Technical writing

Problem solving

Teamwork

Job description

EY is seeking a Senior in Cyber Incident Response within Forensic & Integrity Services in Hong Kong. You will join a team that helps clients respond to cyber incidents, investigate breaches, preserve evidence, and coordinate recovery efforts with technology, legal and risk stakeholders.

The role offers exposure to ransomware, data exfiltration, insider threats, and broad incident scenarios, with opportunities to develop practical digital forensics, incident response, and client deliverables