Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Carson City (NV); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Generous paid time off

Job summary

EY is seeking a CTF Shift Lead to manage the Cyber Triage and Forensics team within Information Security. You will oversee Junior and Senior Triage Analysts, drive incident analysis, and ensure swift threat response. The role blends leadership with technical incident triage in a hybrid US environment.

You’ll report to global leadership, shape SOPs, and coordinate with the Technical Lead to support investigations, while guiding team performance and professional growth.

Qualifications

• A Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• 4-5 years in Security Monitoring/SOC environment, investigating events, threats or vulnerabilities.
• Understanding of electronic investigations and log correlation with intrusion detection platforms.
• Experience with Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among the threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant updates to the global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support.

Skills

Network security

Endpoint security

Threat detection

Incident response

Scripting (Shell, Python, PowerShell)

Linux/Windows administration

Communication skills

Team leadership

Threat hunting coordination

Education

Bachelor's degree in CS/Info Security

Tools

Security event platforms

Active Directory

IDS/IPS rules

Job description

EY is seeking a CTF Shift Lead to manage the Cyber Triage and Forensics team within Information Security. You will oversee Junior and Senior Triage Analysts, drive incident analysis, and ensure swift threat response. The role blends leadership with technical incident triage in a hybrid US environment.

You’ll report to global leadership, shape SOPs, and coordinate with the Technical Lead to support investigations, while guiding team performance and professional growth.