Cyber Triage & Forensics Shift Lead

EY; Philadelphia (Philadelphia County); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY is seeking a CTF Shift Lead to supervise the Cyber Triage and Forensics team, manage Junior and Senior Triage Analysts, and ensure rapid threat response. The role emphasizes leadership, analysis, and incident coordination within a hybrid work model.

You will guide daily operations, set performance expectations, mentor analysts, and work with cross-functional security teams to strengthen EY’s cybersecurity posture across the globe.

Qualifications

• Bachelor's degree or equivalent with 3-4 years in related field.
• 4-5 years in Security Monitoring/SOC environments.
• Experience with electronic investigation and log correlation.
• Knowledge of Linux and/or Windows administration.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among the threat hunting team.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set performance expectations and manage team performance.
• Report case status to global lead.
• Update SOPs and drive continuous improvement.
• Coordinate with Technical Lead for incident support.

Skills

Network security

Endpoint security

Threat hunting

Linux

Windows

TCP/IP

SOPs

Education

Bachelor's degree in Computer Science, Information Security, or equivalent

Tools

Security event platforms

SIEM

Job description

EY is seeking a CTF Shift Lead to supervise the Cyber Triage and Forensics team, manage Junior and Senior Triage Analysts, and ensure rapid threat response. The role emphasizes leadership, analysis, and incident coordination within a hybrid work model.

You will guide daily operations, set performance expectations, mentor analysts, and work with cross-functional security teams to strengthen EY’s cybersecurity posture across the globe.