Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Jericho (NY); Hybrid; USD 109,000 - 194,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Generous paid time off

Job summary

EY is seeking a CTF Shift Lead in the US to steer the Cyber Triage and Forensics team, managing junior and senior analysts and ensuring rapid threat response. You’ll set performance expectations, provide technical guidance, and drive improvements across incident handling and SOP updates.

The role emphasizes collaboration across Linux and Windows environments, security event analysis, and leadership within a hybrid work model, with strong compensation and benefits.

Qualifications

• Bachelor's degree in CS/IS/Information Security (or equivalent).
• 4-5 years in Security Monitoring/SOC environment.
• Understanding of electronic investigation and log correlation.
• Linux/Windows system administration, including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt response to email and case queues
• Distribute workload among the threat hunting team
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update SOPs and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support

Skills

Network security fundamentals

Endpoint security

Threat detection platforms

Linux

Windows administration

Scripting (Python, PowerShell, Shell)

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent (3-4 years)

Job description

EY is seeking a CTF Shift Lead in the US to steer the Cyber Triage and Forensics team, managing junior and senior analysts and ensuring rapid threat response. You’ll set performance expectations, provide technical guidance, and drive improvements across incident handling and SOP updates.

The role emphasizes collaboration across Linux and Windows environments, security event analysis, and leadership within a hybrid work model, with strong compensation and benefits.