Cyber Triage & Forensics Shift Lead

EY; Dallas (TX); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) retirement plan

Paid time off options

Hybrid work model

Flexible vacation policy

Job summary

EY's Information Security organization seeks a CTF Shift Lead to oversee cyber triage and forensics operations, guiding junior and senior analysts and ensuring rapid incident response. You will report to global leadership, shaping performance and strategic alignment across EY's security program.

You will manage daily analysis, triage, and SOP updates in a hybrid work environment, collaborating with cross‑functional teams to protect EY and client information assets and uphold high cybersecurity

Qualifications

• Bachelor's degree in CS/Info Security or equivalent.
• 4–5 years in Security Monitoring/SOC.
• Experience with intrusion detection platforms.
• Proficient in Linux and Windows administration.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among threat hunting team and oversee their activities
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support as needed

Skills

Network security

Endpoint security

Threat intelligence

Security incident response

Linux/Windows

Scripting (Python/PowerShell)

Communication skills

Security writing

Education

Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent

Job description

EY's Information Security organization seeks a CTF Shift Lead to oversee cyber triage and forensics operations, guiding junior and senior analysts and ensuring rapid incident response. You will report to global leadership, shaping performance and strategic alignment across EY's security program.

You will manage daily analysis, triage, and SOP updates in a hybrid work environment, collaborating with cross‑functional teams to protect EY and client information assets and uphold high cybersecurity