Cyber Incident Response Lead

EY; Seattle (WA); Hybrid; USD 91,100 - 170,400; Full time

Benefits offered by this job

Hybrid work model

Total rewards package including health

Job summary

EY’s Cyber & Investigative Services team in Seattle is seeking a Junior Incident Coordinator to assist in coordinating security incident responses, focusing on cyber threats, and using strong incident management practices with cross-functional colleagues. The role emphasizes diplomacy, timely communication, and hands-on cybersecurity skills.

We value foundational incident response, incident management, forensics, and familiarity with regulatory landscapes.

Qualifications

• 5+ years in SOC and/or incident response roles.
• Experience in eDiscovery or forensic analysis.
• Knowledge of cyber threats and incident response processes.
• Familiar with legal aspects of electronic discovery.

Responsibilities

• Coordinate response efforts to cyber incidents caused by external threats.
• Interface with business partners and security teams; manage external relationships as needed.
• Drive integration with incident management programs for consistency.
• Lead small to medium projects as directed by leadership.
• Develop and document processes for scalable response operations and continuous improvement.
• Develop and deliver metrics to leadership.
• Create ready-to-go draft communications and timely reports.
• Own and manage internal playbooks and knowledgebase.
• Be on-call off hours in rotation with other team members.

Skills

SOC experience

Incident response

SIEM (Splunk)

Windows OS

Unix/Linux

Forensics

Communication skills

Team collaboration

Education

Bachelor's or Master's in CS/IS/Engineering

Tools

Splunk

Forensic tools

Log analysis

Job description

EY’s Cyber & Investigative Services team in Seattle is seeking a Junior Incident Coordinator to assist in coordinating security incident responses, focusing on cyber threats, and using strong incident management practices with cross-functional colleagues. The role emphasizes diplomacy, timely communication, and hands-on cybersecurity skills.

We value foundational incident response, incident management, forensics, and familiarity with regulatory landscapes.