GMS-Senior- SecOps-Sentinel

EY; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Benefits offered by this job

Support and coaching from colleagues

Career development opportunities

Flexibility in handling your role

Job summary

EY is seeking a CMS-TDR Senior to enhance their cyber security team. The ideal candidate will assist clients in detecting and responding to security incidents using SIEM, EDR, and NSM solutions. Key responsibilities include operational support, incident validation, and client communication. Qualifications include a B. Tech./B.E. degree, 3+ years of experience with SIEM technologies, and relevant certifications. EY offers opportunities for skill development and a supportive work environment.

Qualifications

• Minimum 3 years of hands-on experience in SIEM/EDR/NSM solutions.
• Certification in any of the SIEM platforms.
• Knowledge of RegEx, Perl scripting, and SQL query language.

Responsibilities

• Operational support using SIEM solutions and EDR.
• Incident validation and detailed investigation.
• Incident coordination and client communication.

Skills

Customer Service oriented

Knowledge of SIEM technologies

Experience troubleshooting SIEM-related issues

Strong knowledge in Security Monitoring

Strong knowledge in Cyber Incident Response

Education

B. Tech./B.E.

Tools

Splunk

Azure Sentinel

CrowdStrike Falcon LogScale

ELK Stack

Fidelis XPS

ExtraHop

Job description

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help build a better working world.

CMS‑TDR Senior – Sentinel

As part of our EY‑cyber security team, you will work as a senior analyst who assists clients in detecting and responding to security incidents with support from their SIEM, EDR, and NSM solutions.

Your Key Responsibilities

• Operational support using SIEM solutions (Sentinel) and EDR (Defender)
• Second‑level incident validation and detailed investigation
• Incident coordination and communication with clients to ensure effective containment, eradication, and recovery
• SIEM support activities including ad‑hoc reporting and basic troubleshooting
• Advising customers on best practices and use cases to achieve customer end‑state requirements
• Providing near real‑time analysis, investigation, reporting, remediation, coordination, and tracking of security‑related activities for customers

Skills & Attributes for Success

• Customer Service oriented – meets commitments to customers; seeks feedback to identify improvement opportunities
• Good knowledge of SIEM technologies such as Splunk, Azure Sentinel, CrowdStrike Falcon LogScale from a Security analyst’s viewpoint
• Experience troubleshooting SIEM‑related issues
• Ability to work with minimal supervision or oversight
• Exposure to IOT/OT monitoring (Claroty, Nozomi Networks, etc.) is a plus
• Strong knowledge and experience in Security Monitoring
• Strong knowledge and experience in Cyber Incident Response
• Knowledge of ELK Stack
• Knowledge of network monitoring platforms such as Fidelis XPS, ExtraHop
• Knowledge of endpoint protection tools, techniques, and platforms such as Defender and CrowdStrike

To Qualify for the Role You Must Have

• B. Tech./B.E. with sound technical skills
• Ability to work in 24x7 shifts
• Strong command of verbal and written English
• Demonstrated technical acumen and critical thinking abilities
• Strong interpersonal and presentation skills
• Minimum 3 years of hands‑on experience in SIEM/EDR/NSM solutions
• Certification in any of the SIEM platforms
• Knowledge of RegEx, Perl scripting, and SQL query language
• Certifications such as CCSA, CEH, CISSP, GCIH, GIAC

What Working at EY Offers

• Support, coaching, and feedback from engaging colleagues
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you