Cyber Triage & Forensics Shift Lead

EY; Cleveland (OH); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Paid time off

Job summary

EY is seeking a CTF Shift Lead in the United States to strengthen the Cyber Triage and Forensics team. You will oversee Junior and Senior Triage Analysts, manage case queues, and provide technical leadership to ensure rapid threat detection and response.

The role emphasizes performance management, collaboration with the Global Lead, and ongoing SOP updates, with a hybrid work model and strong emphasis on security excellence.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent.
• 4–5 years in Security Monitoring/SOC environment, investigating events/threats/vulnerabilities.
• Experience with log correlation and intrusion detection platforms (IDS/IPS).
• Working knowledge of Linux and Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and updates to the global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with Technical Lead for incident and investigation support as needed.

Skills

Security monitoring

SOC experience

Team leadership

Incident response

Python scripting

Linux/Windows

Education

Bachelor's in CS/IS

Tools

SIEM platforms

Active Directory

IDS/IPS rules

Job description

EY is seeking a CTF Shift Lead in the United States to strengthen the Cyber Triage and Forensics team. You will oversee Junior and Senior Triage Analysts, manage case queues, and provide technical leadership to ensure rapid threat detection and response.

The role emphasizes performance management, collaboration with the Global Lead, and ongoing SOP updates, with a hybrid work model and strong emphasis on security excellence.