Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Minneapolis (MN); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical and dental

Pension and 401(k)

Paid time off

Job summary

EY is seeking a CTF Shift Lead within Information Security in the United States to oversee the daily operations of the Cyber Triage and Forensics team, ensuring swift threat response and efficient case queue management. You will provide technical leadership, mentor junior analysts, and maintain SOPs while reporting to global leadership.

Requirements include a Bachelor’s degree in CS/IS or equivalent, 4–5 years in a SOC, Linux/Windows administration, and scripting abilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• Experience in Security Monitoring/SOC environment (4–5 years).
• Knowledge of electronic investigations and log correlation with IDS/IPS platforms.
• Working knowledge of Linux and/or Windows systems administration.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and updates to the global lead.
• Update SOPs and drive continuous improvement within the team.

Job description

EY is seeking a CTF Shift Lead within Information Security in the United States to oversee the daily operations of the Cyber Triage and Forensics team, ensuring swift threat response and efficient case queue management. You will provide technical leadership, mentor junior analysts, and maintain SOPs while reporting to global leadership.

Requirements include a Bachelor’s degree in CS/IS or equivalent, 4–5 years in a SOC, Linux/Windows administration, and scripting abilities.