Cyber Triage & Forensics Shift Lead – SOC Mentor

Ernst & Young Oman; Springfield (IL); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a CTF Shift Lead within its Information Security team in the United States to oversee Cyber Triage and Forensics operations, manage junior and senior analysts, and ensure swift threat responses and efficient case handling.

You will set performance expectations, provide technical leadership, and contribute to strategic alignment through updates to SOPs and investigations, joining a global cybersecurity effort.

Qualifications

• A Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent experience.
• 4–5 years in Security Monitoring/SOC environment investigating security events/threats.
• Experience with log correlation and intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration (AD).
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Detect and respond to information security incidents; develop and follow procedures for security event alerting.
• Participate in security investigations and incident response.
• Monitor, classify, and analyze security events on network or endpoints.
• Manage day-to-day operations and performance of CTF Analysts.
• Distribute workload and oversee threat-hunting activities.
• Provide technical leadership and mentorship to junior analysts.
• Set and track performance expectations; report status to global lead.
• Update SOPs and drive continuous improvement within the team.
• Coordinate with Technical Lead for incident support as needed.

Skills

Network security

Threat analysis

TCP/IP understanding

Security event detection

Linux/Windows

Scripting (Shell, Python)

Communication skills

Integrity

Education

Bachelor's degree in Computer Science / Information Security

Tools

Active Directory

IDS/IPS platforms

Security monitoring tools

Job description

EY is seeking a CTF Shift Lead within its Information Security team in the United States to oversee Cyber Triage and Forensics operations, manage junior and senior analysts, and ensure swift threat responses and efficient case handling.

You will set performance expectations, provide technical leadership, and contribute to strategic alignment through updates to SOPs and investigations, joining a global cybersecurity effort.