Cyber Defense Incident Responder - On-Call Incident Leader

EY; Chicago (IL); Hybrid; USD 91,100 - 170,400; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Comprehensive benefits

Job summary

EY in Chicago seeks a Junior Incident Coordinator for the Cyber & Investigative Services team to coordinate security incident response for cyber events. You’ll apply incident response plans, work with cross-functional teams, and maintain playbooks to ensure rapid, controlled resolutions.

The role requires 5+ years in SOC/IR or related roles, deep understanding of threats, forensics skills, SIEM experience (Splunk), and proficiency with Windows and Unix/Linux systems.

Qualifications

• 5+ years’ experience in at least two of the following roles: SOC member, Security Incident Response Analyst or supporting function, eDiscovery or related forensic role.
• Deep understanding of security threats, vulnerabilities, and incident response.
• Experience with electronic discovery, forensic tools, log correlation and analysis.
• Familiarity with regulatory stipulations regarding security incidents.
• Knowledge of SIEM technologies (e.g., Splunk) and Windows/Unix/Linux operating systems.

Responsibilities

• Coordinate response efforts to cyber incidents that may involve nontraditional working hours
• Interface with business partners and other security teams; manage relationships with vendors and external parties
• Drive integration with other incident management programs to ensure consistency across IT
• Lead small to medium projects as directed by leadership
• Develop and document processes to ensure consistent, scalable incident response
• Deliver metrics to leadership and prepare timely reports during and after events
• Maintain internal action playbooks and knowledgebase
• Be willing to be on-call off hours in rotation with team members

Skills

Root cause analysis

Investigative analysis

Process improvement

Integrity

Analytical mindset

Emotional intelligence

Work-life balance

Education

Bachelor's or Master's in CS/IS/Engineering

Tools

Splunk

Windows OS

Unix/Linux

Job description

EY in Chicago seeks a Junior Incident Coordinator for the Cyber & Investigative Services team to coordinate security incident response for cyber events. You’ll apply incident response plans, work with cross-functional teams, and maintain playbooks to ensure rapid, controlled resolutions.

The role requires 5+ years in SOC/IR or related roles, deep understanding of threats, forensics skills, SIEM experience (Splunk), and proficiency with Windows and Unix/Linux systems.