Cyber Defense Incident Response Lead

EY; Raleigh (NC); Hybrid; USD 91,100 - 170,400; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY’s Cyber & Investigative Services team seeks a Junior Incident Coordinator to lead security incident response. The role requires coordinating responses to cyber threats, working with cross-functional teams, and maintaining effective incident playbooks.

You will be on-call, help deliver metrics to leadership, and partner with IT and business units while advancing your knowledge in forensics, SIEM and incident management within a hybrid EY environment in Raleigh, NC.

Qualifications

• 5+ years in two or more security roles (SOC, IR, eDiscovery/forensics).
• Strong incident response and forensic knowledge.
• Experience with SIEM tools and cross-functional collaboration.

Responsibilities

• Coordinate response efforts to cyber incidents across shifts.
• Liaise with business partners and security teams to align actions.
• Drive integration with incident management programs for consistency.
• Lead small to medium projects directed by leadership.
• Develop and document scalable incident response processes.
• Create and deliver metrics to leadership during and after events.
• Maintain internal playbooks and knowledgebase; be on-call as needed.

Skills

SOC experience

Incident response

Forensics

SIEM Splunk

Windows & Unix

Education

Bachelor's or Master's in CS/IS/Engineering

Tools

Splunk

Job description

EY’s Cyber & Investigative Services team seeks a Junior Incident Coordinator to lead security incident response. The role requires coordinating responses to cyber threats, working with cross-functional teams, and maintaining effective incident playbooks.

You will be on-call, help deliver metrics to leadership, and partner with IT and business units while advancing your knowledge in forensics, SIEM and incident management within a hybrid EY environment in Raleigh, NC.