Cyber Triage & Forensics Lead — Shift Mentor

Ernst & Young Oman; Columbia (SC); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) retirement plan

Paid time off

Job summary

EY is seeking a CTF Shift Lead in the United States to manage the Cyber Triage and Forensics team’s daily operations, guiding Junior and Senior Triage Analysts and ensuring swift threat response and case queue management.

You will lead analysis/triage efforts, set performance expectations, mentor staff, and drive SOP improvements while collaborating with the technical leadership for incident support. A hybrid work model is offered.

Qualifications

• A Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent experience.
• 4–5 years in a Security Monitoring/SOC environment investigating events and threats.
• Experience with log correlation and intrusion detection platforms.
• Knowledge of Linux and/or Windows system administration including Active Directory.
• Scripting or programming ability (Shell, Python, PowerShell, Perl, Java, etc.)

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among the threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Network security

Endpoint security

Security event detection

TCP/IP knowledge

Linux/Windows troubleshooting

Scripting (Python, PowerShell)

Integrity and teamwork

Education

Bachelor's degree in Computer Science, Information Security, or equivalent

Tools

Active Directory

Job description

EY is seeking a CTF Shift Lead in the United States to manage the Cyber Triage and Forensics team’s daily operations, guiding Junior and Senior Triage Analysts and ensuring swift threat response and case queue management.

You will lead analysis/triage efforts, set performance expectations, mentor staff, and drive SOP improvements while collaborating with the technical leadership for incident support. A hybrid work model is offered.