Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Cleveland (OH); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Flexible vacation policy

Hybrid work model

Job summary

EY in the United States is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, manage performance of junior and senior analysts, and ensure swift threat response.

This role requires 4–5 years in SOC, scripting skills, Linux/Windows, and leadership. EY offers hybrid work, competitive compensation, and a comprehensive benefits package within a diverse, inclusive culture.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent.
• 4–5 years of experience in a Security Monitoring/SOC environment.
• Understanding of log correlation with proficiency in intrusion detection platforms.
• Working knowledge of Linux and Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among the threat hunting team and oversee their activities
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support as needed

Skills

Security monitoring

SOC experience

Scripting

Linux/Windows

Threat detection

Team leadership

Education

Bachelor's degree in CS/Info Security

Tools

IDS/IPS platforms

Active Directory

Job description

EY in the United States is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, manage performance of junior and senior analysts, and ensure swift threat response.

This role requires 4–5 years in SOC, scripting skills, Linux/Windows, and leadership. EY offers hybrid work, competitive compensation, and a comprehensive benefits package within a diverse, inclusive culture.