Cyber Triage & Forensics Shift Lead

EY; Austin (TX); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a CTF Shift Lead within Information Security to manage daily operations of the Cyber Triage and Forensics team, guiding Junior and Senior Triage Analysts and setting performance expectations. You will lead investigations, triage incidents, and help maintain high security standards while reporting to global leadership.

The role emphasizes hands-on incident analysis, collaboration across teams, and ongoing SOP updates within a hybrid work model.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent (3-4 years).
• 4-5 years in Security Monitoring / SOC environment investigating events, threats or vulnerabilities.
• Experience with electronic investigation and log correlation; proficiency in IDS/IPS.
• Working knowledge of Linux and/or Windows systems administration, including AD.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java, etc).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update SOPs and drive continuous improvement.
• Coordinate with Technical Lead for incident support as needed.

Skills

Threat detection

Incident response

Mentorship

Security writing

Team leadership

Security event analysis

TCP/IP knowledge

Education

Bachelor's degree in Computer Science / Information Security or equivalent

Tools

Active Directory

Linux

Windows administration

Security event detection platforms

Scripting languages (Python, PowerShell, Shell)

Job description

EY is seeking a CTF Shift Lead within Information Security to manage daily operations of the Cyber Triage and Forensics team, guiding Junior and Senior Triage Analysts and setting performance expectations. You will lead investigations, triage incidents, and help maintain high security standards while reporting to global leadership.

The role emphasizes hands-on incident analysis, collaboration across teams, and ongoing SOP updates within a hybrid work model.