Cyber Triage & Forensics Lead (Hybrid SOC Supervisor)

EY; San Francisco (CA); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Hybrid work model

Paid time off

Job summary

EY is seeking a CTF Shift Lead to manage the Cyber Triage and Forensics team, guiding junior and senior analysts and ensuring swift threat response. The role involves technical leadership, incident analysis, and SOP improvements within a hybrid, client-facing environment.

You will work with a global leadership team to align cybersecurity efforts, reporting updates and maintaining high security standards across EY and client information assets.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• 4-5 years of experience in a Security Monitoring/SOC environment.
• Experience with log correlation and intrusion detection platforms.
• Proficient in Linux and/or Windows systems administration.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java, etc).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with Technical Lead for incident and investigation support.

Skills

Network security

Endpoint security

Threat hunting

Security event detection

TCP/IP basics

Linux/Windows administration

Scripting

Communication

Education

Bachelor's degree in Computer Science / Information Security

Tools

Active Directory

Security monitoring platforms

Job description

EY is seeking a CTF Shift Lead to manage the Cyber Triage and Forensics team, guiding junior and senior analysts and ensuring swift threat response. The role involves technical leadership, incident analysis, and SOP improvements within a hybrid, client-facing environment.

You will work with a global leadership team to align cybersecurity efforts, reporting updates and maintaining high security standards across EY and client information assets.