Cyber Triage & Forensics Shift Lead (SOC Leader)

EY; Fort Worth (TX); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY in the United States is seeking a CTF Shift Lead within the Information Security team to oversee the Cyber Triage and Forensics operations. You will manage Junior and Senior Triage Analysts, set performance expectations, and provide technical leadership to ensure rapid threat detection and efficient case handling.

Reporting to global leadership, you will drive incident response, SOP updates, and collaboration with the Technical Lead to support investigations, while promoting a secure,

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or Information Security, or equivalent work experience.
• 4–5 years in a Security Monitoring/SOC environment, investigating events, threats, or vulnerabilities.
• Understanding of log correlation and intrusion detection platforms.
• Working knowledge of Linux and Windows systems administration, including AD.
• Scripting or programming skills (Python, PowerShell, Perl, etc).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among the threat hunting team and oversee their activities
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support as needed

Skills

Security monitoring

SOC operations

Incident response

Scripting (Python)

Linux/Windows

Education

Bachelor's degree in CS/IS/InfoSec

Tools

SIEM platforms

Active Directory

Linux

Windows administration

Job description

EY in the United States is seeking a CTF Shift Lead within the Information Security team to oversee the Cyber Triage and Forensics operations. You will manage Junior and Senior Triage Analysts, set performance expectations, and provide technical leadership to ensure rapid threat detection and efficient case handling.

Reporting to global leadership, you will drive incident response, SOP updates, and collaboration with the Technical Lead to support investigations, while promoting a secure,