Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Fort Worth (TX); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY is seeking a CTF Shift Lead in the United States to supervise the Cyber Triage and Forensics team, ensure fast incident response, and drive process improvements. You will mentor junior analysts and coordinate with the global lead on case updates.

The role requires a 4–5 year SOC background, strong Linux/Windows admin skills, and scripting abilities. A hybrid work model is offered along with a comprehensive benefits package.

Qualifications

• A Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• A minimum of 4-5 years of experience in a Security Monitoring/SOC environment (investigating security events, threats, vulnerabilities).
• Understanding of electronic investigation and log correlation with proficiency in the latest intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among the threat hunting team and oversee their activities.
• Participate in the analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Security monitoring

SOC experience

Threat detection

Team leadership

Linux/Windows

Scripting (Shell/Python)

Education

Bachelor's degree in Computer Science or Information Security

Tools

Active Directory

Intrusion detection platforms

Job description

EY is seeking a CTF Shift Lead in the United States to supervise the Cyber Triage and Forensics team, ensure fast incident response, and drive process improvements. You will mentor junior analysts and coordinate with the global lead on case updates.

The role requires a 4–5 year SOC background, strong Linux/Windows admin skills, and scripting abilities. A hybrid work model is offered along with a comprehensive benefits package.