Cyber Defense Shift Lead - Triage & Forensics

Ernst & Young Oman; Seattle (WA); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, ensuring efficient case handling and rapid threat response. You will mentor Junior and Senior analysts and set performance expectations as part of a global cybersecurity effort.

Reporting to the global leadership team, you will drive process improvements, coordinate with the Technical Lead, and help align security operations with EY’s strategic goals in a hybrid US work environment.

Qualifications

• Bachelor's degree or equivalent in CS/Info Security.
• 4–5 years in SOC/security monitoring.
• Experience with log correlation and intrusion detection.
• Experience administering Linux/Windows and AD.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with Technical Lead for incident and investigation support as needed.

Skills

Security monitoring

Leadership

Incident response

Threat hunting

SLA management

Communication

Education

Bachelor's degree in CS/Info Security

Tools

SIEM / security event platforms

Linux

Windows

Active Directory

Job description

EY is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, ensuring efficient case handling and rapid threat response. You will mentor Junior and Senior analysts and set performance expectations as part of a global cybersecurity effort.

Reporting to the global leadership team, you will drive process improvements, coordinate with the Technical Lead, and help align security operations with EY’s strategic goals in a hybrid US work environment.