Cyber Triage & Forensics Shift Lead — Mentor & Ops Lead

Ernst & Young Oman; Sacramento (CA); Hybrid; USD 91,000 - 194,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards: medical/dental, pension

Generous paid time off

Job summary

EY is hiring for a CTF Shift Lead in the United States. You will manage a team of CTF Analysts, oversee incident triage, and drive performance and process improvements within the Cyber Triage and Forensics group.

The role blends leadership with hands-on security monitoring, incident analysis, and cross-team coordination. Hybrid work is offered, with strong focus on protecting client information assets and upholding EY standards.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent work experience (3-4 years).
• 4-5 years of experience in a Security Monitoring/SOC environment.
• Experience with electronic investigation and log correlation; proficiency in intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in the analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and updates to global lead.
• Update SOPs and drive continuous improvement.
• Coordinate with Technical Lead for incident and investigation support as needed.

Skills

Network security concepts

Threat intelligence

OSI model understanding

Defense in depth

Information Security principles

Security event detection platforms

TCP/IP / IDS/IPS rules

Communication skills

Linux/Windows troubleshooting

Education

Bachelor's degree in Computer Science / Information Security or equivalent (3-4 years)

Tools

Active Directory

Shell scripting

Python

PowerShell

Linux administration

Job description

EY is hiring for a CTF Shift Lead in the United States. You will manage a team of CTF Analysts, oversee incident triage, and drive performance and process improvements within the Cyber Triage and Forensics group.

The role blends leadership with hands-on security monitoring, incident analysis, and cross-team coordination. Hybrid work is offered, with strong focus on protecting client information assets and upholding EY standards.