Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Dallas (TX); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical & dental coverage

Pension & 401(k)

Paid time off

Job summary

EY is seeking a CTF Shift Lead within our Information Security team to oversee the daily operations of the Cyber Triage and Forensics group. You’ll mentor junior and senior analysts, manage case queues, and ensure timely responses to threats with strong technical leadership.

This hybrid role offers exposure to global security programs and collaboration with the Technical Lead to support investigations and improvements across the security lifecycle.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• A minimum of 4-5 years of experience in a Security Monitoring/SOC environment.
• Understanding of electronic investigation and log correlation with proficiency in the latest intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among the threat hunting team and oversee their activities.
• Participate in the analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Network security

Defense in depth

Information security principles

Security event platforms

TCP/IP & IDS/IPS

Integrity & ethics

Communication skills

Linux & Windows

Scripting

Education

Bachelor's degree in Computer Science/Information Security/IS or equivalent

Tools

Active Directory

Linux

Windows

Job description

EY is seeking a CTF Shift Lead within our Information Security team to oversee the daily operations of the Cyber Triage and Forensics group. You’ll mentor junior and senior analysts, manage case queues, and ensure timely responses to threats with strong technical leadership.

This hybrid role offers exposure to global security programs and collaboration with the Technical Lead to support investigations and improvements across the security lifecycle.