Cyber Defense Triage Lead — Forensics & SOC Mentor

Ernst & Young Oman; Indianapolis (IN); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking a CTF Shift Lead in the US to supervise the Cyber Triage and Forensics team, ensuring swift incident response, efficient case queue management, and quality security operations. You will mentor junior analysts and set performance standards while coordinating with the Technical Lead.

The role emphasizes leadership in a hybrid, client-facing environment within EY Information Security, delivering secure solutions and maintaining high standards across the team.

Qualifications

• Bachelor degree in CS/IS or equivalent work experience.
• 4–5 years in a Security Monitoring/SOC environment.
• Understanding of log correlation with intrusion detection platforms.
• Proficiency in Linux and Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among the threat hunting team and oversee their activities.
• Participate in the analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update Standard Operating Procedures and drive continuous improvement.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Security monitoring

Threat detection

TCP/IP knowledge

Communication skills

Linux/Windows admin

Scripting (Python, PowerShell)

Education

Bachelor's degree in Computer Science or Information Security

Tools

Linux

Windows

Active Directory

Job description

EY is seeking a CTF Shift Lead in the US to supervise the Cyber Triage and Forensics team, ensuring swift incident response, efficient case queue management, and quality security operations. You will mentor junior analysts and set performance standards while coordinating with the Technical Lead.

The role emphasizes leadership in a hybrid, client-facing environment within EY Information Security, delivering secure solutions and maintaining high standards across the team.