Senior SIEM/SOAR Lead – TVM & Threat Management

Ernst & Young Oman; Little Rock (AR); On-site; USD 171,000 - 390,000; Full time

Job summary

EY seeks a senior cybersecurity professional to lead SIEM and SOAR initiatives across client engagements. You will drive threat detection, incident response, and security operations enhancements while mentoring junior consultants.

Role emphasizes leadership, client interaction, and delivering high-impact security programs with a focus on MITRE ATT&CK alignment and continuous learning.

Qualifications

• 6–10 years in information security focusing on SIEM/SOAR platforms.
• Hands-on with at least one leading platform: Microsoft Sentinel, CrowdStrike SIEM, or Chronicle.
• 3 years consulting experience including proposals and client presentations.
• 2 years in networking, security technologies, and incident response.
• 2 years leading process design and SIEM/SOAR integration into operations.

Responsibilities

• Lead deployment of security solutions and work with Advanced Security Centers.
• Manage multiple processes and deliver with high quality and risk controls.
• Build strong client relationships as a trusted advisor on security programs.
• Provide technical leadership and mentor junior consultants.
• Engage with clients daily, guiding sessions and workstreams.

Skills

SIEM

SOAR

Incident response

Threat hunting

Client engagement

Team leadership

Cybersecurity risk

Cloud security

Education

Bachelor’s degree in MIS / Cybersecurity / CS / Engineering / Business / Accounting / Finance or related field

Master’s degree in MIS / Cybersecurity / CS / Engineering / Business / Accounting / Finance or related field

Tools

Microsoft Sentinel

CrowdStrike NextGen SIEM

Google Chronicle

Cribl

Databahn

Apache NiFi

Job description

EY seeks a senior cybersecurity professional to lead SIEM and SOAR initiatives across client engagements. You will drive threat detection, incident response, and security operations enhancements while mentoring junior consultants.

Role emphasizes leadership, client interaction, and delivering high-impact security programs with a focus on MITRE ATT&CK alignment and continuous learning.