Senior Cyber Threat & SIEM/SOAR Leader

Ernst & Young Oman; Charleston (WV); On-site; USD 190,000 - 420,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a senior Cybersecurity TVM lead to deliver advanced SIEM/SOAR solutions and risk-aware security operations for diverse clients. You will guide teams, mentor junior consultants, and drive engineering excellence across engagements.

This remote US-based role involves frequent travel (80%), collaboration with Advanced Security Centers, and building trusted client relationships while staying current on security trends and frameworks.

Qualifications

• Bachelor’s degree in MIS/Cybersecurity/CS/Engineering/Business/Accounting/Finance or related field and 5+ years of relevant work experience.
• Alternative: Master’s degree and 4+ years of relevant work experience.
• 6–10 years of information security with SIEM/SOAR focus and hands‑on with platforms such as Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle.

Responsibilities

• Lead and deliver multiple security and IT risk projects with focus on SIEM and SOAR.
• Mentor junior consultants and provide technical leadership across engagements.
• Develop and present security solutions, advise on risk, and maintain client relationships.

Skills

SIEM & SOAR

Cybersecurity

Team leadership

Client engagement

Incident response

Education

Bachelor’s degree in MIS/Cybersecurity/CS/Engineering/Business/Accounting/Finance or related

Master’s degree in MIS/Cybersecurity/CS/Engineering/Business/Accounting/Finance or related

Tools

Microsoft Sentinel

CrowdStrike NextGen SIEM

Google Chronicle

MITRE ATT&CK

Cribl

Databahn

Apache NiFi

Job description

EY is seeking a senior Cybersecurity TVM lead to deliver advanced SIEM/SOAR solutions and risk-aware security operations for diverse clients. You will guide teams, mentor junior consultants, and drive engineering excellence across engagements.

This remote US-based role involves frequent travel (80%), collaboration with Advanced Security Centers, and building trusted client relationships while staying current on security trends and frameworks.