Cyber Triage & Forensics Shift Lead — SOC Supervisor

Ernst & Young Oman; Raleigh (NC); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Pension

Paid time off

Job summary

EY in the United States is seeking a CTF Shift Lead within the Information Security group to oversee the Cyber Triage and Forensics team's daily operations, manage performance of junior and senior analysts, and ensure rapid threat response.

Reporting to global leadership, the Shift Lead provides technical guidance, updates SOPs, and collaborates with the Technical Lead to support incident investigations while promoting a culture of security excellence.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Information Security, or equivalent
• 4–5 years in Security Monitoring/SOC environment
• Understanding of log correlation with intrusion detection platforms
• Linux and/or Windows system administration including Active Directory
• Scripting or programming skills (Python/PowerShell/Shell)

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts
• Ensure prompt and efficient response to email and case queues
• Distribute workload among the threat hunting team and oversee their activities
• Participate in the analysis and triage of security events
• Provide technical leadership and mentorship to junior analysts
• Set clear performance expectations and manage team performance
• Report case status and significant incident updates to the global lead
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team
• Coordinate with the Technical Lead for incident and investigation support as needed

Skills

Security monitoring

Threat detection

Linux

Windows

Python

PowerShell

Team leadership

SOPs

Education

Bachelor's degree in Computer Science / Information Security

Tools

SIEM

IDS/IPS

Active Directory

Security event platforms

Job description

EY in the United States is seeking a CTF Shift Lead within the Information Security group to oversee the Cyber Triage and Forensics team's daily operations, manage performance of junior and senior analysts, and ensure rapid threat response.

Reporting to global leadership, the Shift Lead provides technical guidance, updates SOPs, and collaborates with the Technical Lead to support incident investigations while promoting a culture of security excellence.