Cyber Incident Response Lead (Hybrid)

EY; San Francisco (CA); Hybrid; USD 91,100 - 170,400; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY Technology is seeking a Junior Incident Coordinator to oversee security incident response across cyber events, coordinating with multiple teams and maintaining strong communication. The role requires foundational incident handling skills, cross-team collaboration, and on-call availability.

You will develop, document, and improve incident response processes, deliver timely reports to leadership, and participate in a hybrid, client-facing environment.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, or related field.
• Minimum 5+ years in SOC, IR, or related roles with cyber incident exposure.
• Experience with SIEM technologies and Windows/Linux environments.

Responsibilities

• Coordinate response to cyber incidents including after-hours events.
• Liaise with business units and security teams; manage relationships with partners.
• Lead small to mid-size projects as directed by leadership.
• Develop and document incident response processes and playbooks.
• Create and deliver leadership-ready metrics and reports during and after events.

Skills

Root cause analysis

Incident analysis

Lessons learned

Integrity & judgment

Emotional intelligence

Education

Bachelor's or Master's in CS/IS/Engineering

Tools

Splunk

Forensic tools

Job description

EY Technology is seeking a Junior Incident Coordinator to oversee security incident response across cyber events, coordinating with multiple teams and maintaining strong communication. The role requires foundational incident handling skills, cross-team collaboration, and on-call availability.

You will develop, document, and improve incident response processes, deliver timely reports to leadership, and participate in a hybrid, client-facing environment.