Cyber Triage & Forensics Lead - Hybrid Role

Ernst & Young Oman; Phoenix (AZ); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

Hybrid work model

Paid time off

Job summary

EY is seeking a CTF Shift Lead within its Information Security team to oversee the Cyber Triage and Forensics function, coordinating junior and senior analysts and ensuring rapid threat response.

You will set performance expectations, provide technical leadership, and collaborate with global leadership to align security operations with EY's strategic goals. This hybrid role offers competitive pay and growth opportunities in a diverse, inclusive environment.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• 4-5 years of experience in a Security Monitoring/SOC environment.
• Understanding of electronic investigation and log correlation with proficiency in intrusion detection platforms.
• Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).
• Desirable certifications such as SSCP, CEH, GCIH, GCFA, GCIA, GSEC, GIAC, Security+.
• Leadership experience as a team lead or supervisor (preferred).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among the threat hunting team and oversee their activities
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update SOPs and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support as needed

Skills

Network & endpoint security

Threat hunting

Incident response

Linux/Windows administration

Scripting

IDS/IPS concepts

Security event platforms

TCP/IP understanding

Communication skills

Leadership/mentorship

Education

Bachelor's degree in Computer Science/Information Security

Tools

Active Directory

Job description

EY is seeking a CTF Shift Lead within its Information Security team to oversee the Cyber Triage and Forensics function, coordinating junior and senior analysts and ensuring rapid threat response.

You will set performance expectations, provide technical leadership, and collaborate with global leadership to align security operations with EY's strategic goals. This hybrid role offers competitive pay and growth opportunities in a diverse, inclusive environment.