Cyber Defense Incident Response Lead

EY; City of Rochester (NY); Hybrid; USD 109,300 - 193,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension/401(k)

Job summary

EY is seeking a Cyber & Investigative Services (CIS) Junior Incident Coordinator to coordinate security incident response across cybersecurity events. The role emphasizes strong communication, diplomacy, and hands-on digital forensics skills in a fast-paced incident management environment.

Qualifications include a CS/IS/Engineering degree and at least 5+ years in SOC/IR roles, plus proficiency with Windows, Unix/Linux, and SIEM tools.

Qualifications

• Bachelors or Masters in Computer Science, Information Systems, Engineering, or related field, or equivalent experience.
• 5+ years’ experience in at least two SOC/security incident roles.
• Deep understanding of threats, incident response, and forensic methodologies.
• Familiarity with legalities of electronic discovery and regulatory st​andards.
• Experience with SIEM technologies (e.g. Splunk).

Responsibilities

• Coordinate response efforts to cyber incidents caused by external threats, including after-hours events.
• Liaise with multiple business units and external parties to align incident response activities.
• Drive integration with other incident management programs to ensure consistency.
• Lead small to medium projects as directed by leadership.
• Develop and document scalable incident response processes and playbooks.

Skills

Incident response

SOC experience

SIEM (Splunk)

Windows

Unix/Linux

Communication skills

Project coordination

On-call rotation

Cross-functional collab

Education

Bachelors or Masters in Computer Science/Information Systems/Engineering

Tools

Forensic tools

Log analysis

Job description

EY is seeking a Cyber & Investigative Services (CIS) Junior Incident Coordinator to coordinate security incident response across cybersecurity events. The role emphasizes strong communication, diplomacy, and hands-on digital forensics skills in a fast-paced incident management environment.

Qualifications include a CS/IS/Engineering degree and at least 5+ years in SOC/IR roles, plus proficiency with Windows, Unix/Linux, and SIEM tools.