Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Providence (RI); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a CTF Shift Lead within Information Security in the United States. The role focuses on overseeing Cyber Triage and Forensics operations, ensuring timely threat response and effective case management, and providing technical leadership to the team.

As part of a hybrid, client-serving environment, you will help set performance expectations, supervise analysts, and support ongoing SOP improvements while collaborating with the global leadership team.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• 4–5 years in Security Monitoring/SOC environment investigating security events.
• Understanding of electronic investigation and log correlation.
• Proficient in Linux and/or Windows administration including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status to global lead and key incident updates.
• Update SOPs and drive team improvements.
• Coordinate with Technical Lead for incident support.

Skills

SOC experience

Security event analysis

OS administration

Scripting: Python/PowerShell

Active Directory

TCP/IP basics

Threat detection platforms

Leadership

Education

Bachelor's degree in Computer Science or Information Security

Tools

Linux

Windows Admin

PowerShell

Python

Active Directory

SIEM platforms

Job description

EY is seeking a CTF Shift Lead within Information Security in the United States. The role focuses on overseeing Cyber Triage and Forensics operations, ensuring timely threat response and effective case management, and providing technical leadership to the team.

As part of a hybrid, client-serving environment, you will help set performance expectations, supervise analysts, and support ongoing SOP improvements while collaborating with the global leadership team.