Cyber Triage & Forensics Team Lead (Shift)

Ernst & Young Oman; Jefferson City (MO); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Total Rewards package

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a CTF Shift Lead within Information Security in the United States. You will oversee the Cyber Triage and Forensics team, manage Junior and Senior Triage Analysts, and ensure swift threat response while maintaining case queues.

The role reports to global leadership and requires leadership in incident analysis and security operations. You will mentor analysts, update SOPs, coordinate with the Technical Lead, and help align security activities with EY’s strategic goals in a hybrid

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• 4-5 years in a Security Monitoring/SOC environment investigating security events/threats.
• Proficiency in log correlation and intrusion detection platforms.

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Ensure prompt response to email and case queues.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Set clear performance expectations and manage team performance.
• Report case status and significant incident updates to global lead.
• Update SOPs and drive continuous improvement.
• Coordinate with Technical Lead for incident support.

Skills

Security monitoring

SOC

Python

PowerShell

Linux

Windows

Communication

Technical writing

Education

Bachelor's degree in Computer Science or Information Security

Tools

SIEM

IDS/IPS

Job description

EY is seeking a CTF Shift Lead within Information Security in the United States. You will oversee the Cyber Triage and Forensics team, manage Junior and Senior Triage Analysts, and ensure swift threat response while maintaining case queues.

The role reports to global leadership and requires leadership in incident analysis and security operations. You will mentor analysts, update SOPs, coordinate with the Technical Lead, and help align security activities with EY’s strategic goals in a hybrid