Cyber Triage & Forensics Lead — Team Mentor

EY; Los Angeles (CA); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY is seeking a Shift Lead for the Cyber Triage and Forensics team in the United States. The role focuses on maintaining operations, guiding junior and senior analysts, and driving fast incident response and case management.

The Shift Lead sets performance expectations and provides technical leadership within the security operations center. You will work with threat hunting and incident response processes, update SOPs, and coordinate with the Technical Lead to support investigations and security

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• 4+ years in Security Monitoring/SOC environment.
• Experience with log correlation and intrusion detection platforms.
• Linux and/or Windows systems administration knowledge (AD).
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and updates to the global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with Technical Lead for incident/support as needed.

Skills

Network security

Endpoint security

Threat intelligence

OSI model

Defense in depth

Security event platforms

TCP/IP/IDS-IPS

Linux/Windows troubleshooting

Communication & writing

Education

Bachelor's degree in Computer Science / Information Security

Job description

EY is seeking a Shift Lead for the Cyber Triage and Forensics team in the United States. The role focuses on maintaining operations, guiding junior and senior analysts, and driving fast incident response and case management.

The Shift Lead sets performance expectations and provides technical leadership within the security operations center. You will work with threat hunting and incident response processes, update SOPs, and coordinate with the Technical Lead to support investigations and security