Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; San Francisco (CA); Hybrid; USD 91,000 - 194,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plans

Paid time off

Hybrid work model

Job summary

EY is seeking a CTF Shift Lead within its Information Security team in the United States. You will manage day-to-day operations of the CTF Analysts, drive incident response, and provide technical leadership to junior staff while aligning with global cyber security objectives.

You will mentor analysts, maintain SOPs, and coordinate with the Technical Lead to support investigations, threat detection, and continuous improvement, enabling EY to protect client information assets and respond swiftly

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• 4–5 years in a Security Monitoring/SOC environment; investigate events/threats.
• Understanding of electronic investigations and log correlation.
• Proficiency with Linux and Windows system administration including AD.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among the threat hunting team and oversee activities
• Participate in analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update SOPs and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support

Skills

Network security

Endpoint security

Defense in depth

InfoSec principles

Security event platforms

TCP/IP

IDS/IPS rules

Integrity

Communication skills

Technical writing

Linux

Windows admin

Scripting: Shell/Python/PowerShell

Education

Bachelor’s degree in Computer Science, Information Systems, Information Security, or equivalent

Tools

Active Directory

Job description

EY is seeking a CTF Shift Lead within its Information Security team in the United States. You will manage day-to-day operations of the CTF Analysts, drive incident response, and provide technical leadership to junior staff while aligning with global cyber security objectives.

You will mentor analysts, maintain SOPs, and coordinate with the Technical Lead to support investigations, threat detection, and continuous improvement, enabling EY to protect client information assets and respond swiftly