Senior Consultant - SIEM Engineer - Cybersecurity

Ernst & Young Advisory Services Sdn Bhd; Auckland; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Career development

Flexible work arrangements

Comprehensive benefits package

Job summary

Ernst & Young Advisory Services Sdn Bhd in Auckland is seeking a Technical Lead for threat detection and response onboarding projects. You will design, build, and optimise SIEM and EDR platforms, monitor security alarms, and escalate incidents to clients per engagement.

You’ll also support junior SOC members, participate in client meetings, and ensure delivery within ITIL-aligned processes and SLAs while driving continuous improvement in security operations.

Qualifications

• Proven experience within information security, specifically in a security operations and vulnerability discovery or information operations/incident role.
• Knowledge of security concepts and methods.
• Experience with SIEM/EDR tooling is essential; familiarity with common security tools is beneficial.

Responsibilities

• Lead threat detection and response onboarding projects as Technical Lead.
• Design, build, support, and optimise SIEM and EDR platforms.
• Monitor and respond to security alarms, incidents in SIEM and EDR platforms.
• Escalate security alarms/incidents to clients as defined per engagement.
• Monitor and manage tickets per security operations processes and SLAs.
• Support junior team members in delivering SOC services to clients.
• Participate in client facing meetings.
• Deliver services to contract terms and SLAs.
• Follow ITIL practices for service request, incident, problem and change management.
• Contribute to security operations continuous improvement program.
• Communicate effectively with customers, teammates, and management.

Skills

Information security experience

Security operations

Incident response

Tools

Splunk

CrowdStrike Falcon

MS Defender/Sentinel

Tenable

Qualys

ServiceNow

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Location: Auckland

Other locations: Primary Location Only

Date: 3 Sept 2026

Requisition ID: 1710160

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

With your contribution and my contribution, together we will thrive.

Hei Oranga Iwi | The opportunity

This role is based in our Tāmaki Makaurau (Auckland) office, you’ll work with a values-based team of amazing technologists who are always growing, learning, and adapting, both in and out of the office.

• Technical Lead for threat detection and response onboarding projects
• Design, build, support, and optimise SIEM and EDR platforms used in threat detection and response services
• Monitor and respond to security alarms\\alerts\\incidents in SIEM and EDR platforms
• Escalate security alarms\\alerts\\incidents to clients as defined per engagement
• Monitor and manage tickets in accordance with processes defined in the security operations manual and SLA’s
• Support junior team members in delivering SOC services to client
• Participate in client facing meetings
• Deliver services to contract terms and SLA’s
• Follow Information Technology Infrastructure Library (ITIL) practices regarding service request, incident, problem and change management
• Contribute to security operations continuous improvement program
• Communicate effectively with customers, teammates, and management.

We’re interested in your strengths, what you want to learn, and how far you want to go.

• Proven experience within information security, specifically in a security operations and vulnerability discovery or information operations/incident role.
• Strong working knowledge of at least three of the following security tools: SIEM, EDR, host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website security
• Experience with utilising security SIEM tooling is a must. It is most beneficial to have experience with Splunk, Crowdstrike NextGen SIEM & Falcon, MS Defender/Sentinel, Tenable, Qualys, and ServiceNow.
• Knowledge of general security concepts and methods

It's great, but not essential, if you have:

• Experience with Windows, Linux, UNIX, any other major operating systems
• Ability to mesh sound technical and security practices to problem solving
• Demonstrate in-depth technical capabilities and professional knowledge
• Additional certifications and training preferred in the following areas: Network Security certifications (CISSP, Security+, SANS, ISACA, Vendor Certificates), Project Management training/certification, and Quality Management (ITIL, Six Sigma, TQM, etc.) training/certification

Ko Taku Rourou | What we offer you

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.

• Career development: At EY, your career is yours to shape!We’lldevelop you with future-focused skills and equip you with world-class experienceswww.ey.com/nz/careerdevelopment
• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package : From a yearly wellness incentive,to access to additional 8 weeks of flex leave per year, and family-friendly policies, includingup to26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionallywww.ey.com/nz/benefits

Inclusiveness iscore to who we areandhow we worktogether, driving value for our peopleandfor our business.We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providingan equitableand barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best andparticipateequitably in our recruitment process.We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch [e-mail] or+64 9 300 7044(option 2). Anything you tell us will be kept completely confidential.

#LI-Hybrid

EY

| Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor

LinkedIn