Hybrid Cyber Triage Lead & Forensics Supervisor

EY; Alpharetta (GA); Hybrid; USD 91,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Job summary

EY is seeking a CTF Shift Lead in the United States to maintain efficient Cyber Triage and Forensics operations. You will manage a team of Junior and Senior Triage Analysts, set performance expectations, and provide technical leadership while ensuring swift threat response.

You will collaborate to detect incidents, maintain procedures for alerting, and participate in security investigations, with heavy emphasis on mentoring, SOP updates, and cross-team coordination to uphold high cybersecurity

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Security, or equivalent work experience (3-4 years).
• A minimum of 4-5 years in Security Monitoring/SOC environment, investigating events, threats, or vulnerabilities.
• Experience with electronic investigation and log correlation using intrusion detection platforms.
• Working knowledge of Linux and/or Windows systems administration, including Active Directory.
• Scripting or programming skills (Shell, Python, PowerShell, Perl, Java, etc).

Responsibilities

• Manage day-to-day operations and performance of the CTF Analysts.
• Distribute workload among threat hunting team and oversee activities.
• Participate in analysis and triage of security events.
• Provide technical leadership and mentorship to junior analysts.
• Update SOPs and drive continuous improvement within the team.

Skills

Threat detection

Incident response

Team leadership

Communication

Linux/Windows troubleshooting

TCP/IP knowledge

Education

Bachelor's degree in CS/IS

Tools

SIEM platforms

IDS/IPS

Active Directory

Job description

EY is seeking a CTF Shift Lead in the United States to maintain efficient Cyber Triage and Forensics operations. You will manage a team of Junior and Senior Triage Analysts, set performance expectations, and provide technical leadership while ensuring swift threat response.

You will collaborate to detect incidents, maintain procedures for alerting, and participate in security investigations, with heavy emphasis on mentoring, SOP updates, and cross-team coordination to uphold high cybersecurity