Senior Cyber Threat & SIEM/SOAR Leader

Ernst & Young Oman; Cleveland (OH); On-site; USD 171,000 - 426,000; Full time

Job summary

EY is seeking a senior cybersecurity professional to join the TVM team, focusing on SIEM and SOAR implementations and threat management for diverse clients. You will lead engagements, mentor junior consultants, and deliver high-quality security solutions using leading platforms such as Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle.

Responsibilities include incident response, threat detection, and advanced data analytics with ETL tools, while maintaining strong client

Qualifications

• 6–10 years in information security focused on SIEM/SOAR with hands-on use of leading platforms.
• 3 years consulting experience including proposals and client presentations.
• 2 years security concepts incl. vulnerability assessments, privacy, incident response & governance.
• 2 years networking, OS fundamentals, and security tech (firewalls/IDS/IPS).
• 2 years leading process design and mapping, integrating SIEM/SOAR into business ops.

Responsibilities

• Provide reliable solutions to clients’ IT risk and security needs within TVM.
• Lead and mentor teams, deliver multiple projects with focus on quality and risk.
• Engage with clients daily, run sessions/workstreams, and identify opportunities.
• Manage engagement economics, budgets, and resource plans.

Skills

Information security expertise

Consulting experience

Leadership

Education

Bachelor’s degree in MIS / Cybersecurity / CS / Engineering / Business / Accounting / Finance

Master’s degree in MIS / Cybersecurity / CS / Engineering / Business / Accounting / Finance

Tools

Microsoft Sentinel

CrowdStrike NextGen SIEM

Google Chronicle

Cribl

Databahn

Apache NiFi

Job description

EY is seeking a senior cybersecurity professional to join the TVM team, focusing on SIEM and SOAR implementations and threat management for diverse clients. You will lead engagements, mentor junior consultants, and deliver high-quality security solutions using leading platforms such as Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle.

Responsibilities include incident response, threat detection, and advanced data analytics with ETL tools, while maintaining strong client