Cyber Triage & Forensics Shift Lead

EY; Seattle (WA); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, aligning performance with security objectives across incidents and investigations. You will lead junior and senior analysts, set expectations, and drive process improvements in a global security program.

Join EY’s Information Security team in a hybrid US role, leveraging experience in monitoring, triage, and leadership to protect EY and client information assets while advancing security operations at scale.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience.
• 4–5 years of Security Monitoring/SOC experience with incident & threat investigations.
• Proficiency with log correlation and intrusion detection platforms.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat-hunting team; oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and updates to the global lead.
• Update SOPs; drive continuous improvement within the team.
• Coordinate with Technical Lead for incident support as needed.

Skills

Security monitoring

SOC experience

Linux administration

Windows administration

Python scripting

PowerShell scripting

TCP/IP knowledge

IDS/IPS rules

Leadership

Education

Bachelor's in CS/Info Systems/Security

Tools

SIEM platforms

Active Directory

Threat intel platforms

Job description

EY is seeking a CTF Shift Lead to oversee the Cyber Triage and Forensics team, aligning performance with security objectives across incidents and investigations. You will lead junior and senior analysts, set expectations, and drive process improvements in a global security program.

Join EY’s Information Security team in a hybrid US role, leveraging experience in monitoring, triage, and leadership to protect EY and client information assets while advancing security operations at scale.