Senior TVM Cybersecurity SIEM/SOAR Lead

Ernst & Young Oman; Portland (OR); On-site; USD 171,000 - 390,000; Full time

Benefits offered by this job

Medical coverage

Pension plan

401(k)

Paid time off

Job summary

EY is seeking a seasoned cybersecurity leader to deliver advanced SIEM and SOAR solutions for clients across the US. You will guide engagements, mentor junior consultants, and promote risk‑aware security operations. Strong focus on Microsoft Sentinel, CrowdStrike, and Google Chronicle is essential.

The role requires deep knowledge of threat detection, incident response, and secure architectures, with travel up to 80% and collaboration in cross‑functional teams.

Qualifications

• 6–10 years of information security experience with a focus on SIEM and SOAR solutions
• Experience with at least one leading platform: Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle
• 3 years of consulting experience including proposals and presentations
• 2 years of security concepts: vulnerability/privacy assessments, intrusion detection, incident response, governance
• 2 years in networking, OS fundamentals, and security tech including firewalls/IDS/IPS, etc.
• 2 years leading process design and mapping, SIEM/SOAR integration into business ops

Responsibilities

• Lead and mentor teams delivering security and IT risk solutions
• Engage with clients daily, guiding workstreams and identifying service opportunities
• Manage engagement economics, budgets, and resource plans
• Build strong client relationships as trusted advisor for security implementations
• Stay current with IT and industry trends and advanced SIEM technologies

Skills

SIEM

SOAR

Consulting

Vulnerability assessment

Incident response

Education

Bachelor's degree (MIS/Cybersecurity/CS/Engineering)

Master's degree (MIS/Cybersecurity/CS/Engineering)

Tools

Microsoft Sentinel

CrowdStrike NextGen SIEM

Google Chronicle

Cribl

Databahn

Apache NiFi

Job description

EY is seeking a seasoned cybersecurity leader to deliver advanced SIEM and SOAR solutions for clients across the US. You will guide engagements, mentor junior consultants, and promote risk‑aware security operations. Strong focus on Microsoft Sentinel, CrowdStrike, and Google Chronicle is essential.

The role requires deep knowledge of threat detection, incident response, and secure architectures, with travel up to 80% and collaboration in cross‑functional teams.