Cyber Triage & Forensics Team Lead

Ernst & Young Oman; Des Moines (IA); Hybrid; USD 91,000 - 170,000; Full time

Job summary

EY is seeking a CTF Shift Lead in the United States to oversee the Cyber Triage and Forensics team within Information Security. You will manage, mentor, and optimize performance of Junior and Senior Triage Analysts, ensuring rapid threat response and efficient case queue handling.

Responsibilities include security event detection, investigations, and procedural improvements, with a hybrid work setup and a focus on maintaining high cybersecurity standards across the organization.

Qualifications

• A Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• 4-5 years of experience in a Security Monitoring/SOC environment.
• Understanding of electronic investigation and log correlation with proficiency in the latest intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell scripting, Python, PowerShell, Perl, Java, etc.).

Responsibilities

• Detect and respond to information security incidents.
• Develop, maintain, and follow procedures for security event alerting.
• Participate in security investigations.
• Monitor, research, classification and analysis of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to the global lead.
• Update Standard Operating Procedures (SOPs) and drive continuous improvement within the team.
• Coordinate with the Technical Lead for incident and investigation support as needed.

Skills

Network security

Endpoint security

Threat hunting

Incident response

TCP/IP

Linux

Windows

Scripting

Education

Bachelor's degree in Computer Science or Information Security

Tools

SIEM platforms

Active Directory

Python

PowerShell

Shell scripting

Job description

EY is seeking a CTF Shift Lead in the United States to oversee the Cyber Triage and Forensics team within Information Security. You will manage, mentor, and optimize performance of Junior and Senior Triage Analysts, ensuring rapid threat response and efficient case queue handling.

Responsibilities include security event detection, investigations, and procedural improvements, with a hybrid work setup and a focus on maintaining high cybersecurity standards across the organization.