Cyber Triage & Forensics Shift Lead

Ernst & Young Oman; Topeka (KS); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY in the United States is seeking a CTF Shift Lead for Cyber Triage and Forensics to help protect EY and client information assets. You will manage Junior and Senior Triage Analysts, ensuring swift threat responses and effective case queues.

Reporting to global leadership, you provide technical leadership, set performance expectations, mentor analysts, and drive SOP updates. This role supports security operations and enables fast, reliable investigations across endpoints and networks.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• A minimum of 4-5 years of experience in a Security Monitoring/SOC environment (SOC).
• Understanding of electronic investigation and log correlation with proficiency in the latest intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt and efficient response to email and case queues.
• Distribute workload among the threat hunting team and oversee their activities.
• Participate in the analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Security monitoring

SOC experience

Incident analysis

Linux/Windows

Scripting

Communication

Team leadership

Education

Bachelor's degree in CS/InfoSec

Tools

SIEM platforms

Intrusion detection

Active Directory

Python

Job description

EY in the United States is seeking a CTF Shift Lead for Cyber Triage and Forensics to help protect EY and client information assets. You will manage Junior and Senior Triage Analysts, ensuring swift threat responses and effective case queues.

Reporting to global leadership, you provide technical leadership, set performance expectations, mentor analysts, and drive SOP updates. This role supports security operations and enables fast, reliable investigations across endpoints and networks.