Senior Cyber Incident Response Leader

EY; Taguig; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

EY is seeking a Senior Incident Response Analyst to join its global cybersecurity operations. You will lead detection, investigation, containment, and remediation across cloud, on‑premise, and hybrid environments, guiding junior analysts and refining playbooks.

You will work with advanced security tools and cross‑functional teams to strengthen EY’s defenses and protect assets against evolving threats.

Qualifications

• 3-5 years related experience in cybersecurity operations, SOC or similar.
• Experience with cloud, on‑prem, and hybrid environments.
• Certifications are a strong advantage.

Responsibilities

• Lead Tier 3 security incident response for apps, networks, and infrastructure.
• Coordinate containment, eradication, and recovery actions.
• Mentor junior analysts and improve playbooks and detection capabilities.
• Communicate incident status to stakeholders and perform updates.
• Collaborate with global teams to standardize procedures.
• Maintain incident documentation and post‑mortem reporting.

Skills

Incident response

Threat hunting

Digital forensics

MITRE ATT&CK

Analytical thinking

Mentoring juniors

Communication

Education

GCIH

GCFA

GCIA

CEH

CISSP

CCIR

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Defender for Endpoint

XSOAR

Job description

EY is seeking a Senior Incident Response Analyst to join its global cybersecurity operations. You will lead detection, investigation, containment, and remediation across cloud, on‑premise, and hybrid environments, guiding junior analysts and refining playbooks.

You will work with advanced security tools and cross‑functional teams to strengthen EY’s defenses and protect assets against evolving threats.