Cyber Incident Response Coordinator (On-Call)

Ernst & Young Advisory Services Sdn Bhd; Hoboken (NJ); On-site; USD 91,100 - 170,400; Full time

Job summary

EY is seeking a Cyber & Investigative Services (CIS) Junior Incident Coordinator to coordinate security incident response and manage communications across teams. The role requires hands-on incident response, forensics knowledge, and strong written/verbal skills to handle fast-paced cyber events.

Candidates should have foundational incident response experience, familiarity with SIEM tools like Splunk, and a background in Windows and Unix/Linux environments.

Qualifications

• Bachelor's or master's degree in computer science, information systems, engineering, or related field.
• 5+ years of experience in two roles: SOC, IR analyst, eDiscovery or forensic.
• Deep understanding of security threats and incident response.
• Experience with SIEM technologies (e.g., Splunk).
• Windows and Unix/Linux operating systems knowledge.

Responsibilities

• Coordinate response efforts to cyber incidents, including after-hours work.
• Interface with business partners and other security teams.
• Drive integration with incident management programs for consistency.
• Lead small to medium projects as directed.
• Develop and document processes for scalable incident response.
• Create metrics for leadership reporting.
• Prepare and deliver incident communication to leadership.
• Manage internal playbooks and knowledgebase.
• Be on-call during rotation.

Skills

SOC experience

Incident response

Forensics

Threat intelligence

Regulatory knowledge

SIEM (Splunk)

Windows

Unix/Linux

Communication skills

Problem solving

Education

Bachelor's or Master's in Computer Science/Info Systems/Engineering

Tools

Splunk

Job description

EY is seeking a Cyber & Investigative Services (CIS) Junior Incident Coordinator to coordinate security incident response and manage communications across teams. The role requires hands-on incident response, forensics knowledge, and strong written/verbal skills to handle fast-paced cyber events.

Candidates should have foundational incident response experience, familiarity with SIEM tools like Splunk, and a background in Windows and Unix/Linux environments.