Cyber Defense - Cyber Triage and Forensic Analyst

Responsibilities

• Detect and respond to information security incidents through triage and detailed investigations
• Engage in proactive threat hunting and provide expert security assessments using EDR and SIEM tools
• Communicate with IT stakeholders during incident response to ensure effective containment and remediation
• Perform detailed forensic investigations across Windows and Unix/Linux operating systems
• Act as an escalation point for incident response and mentor junior team members
• Report on incident metrics and develop comprehensive reports to ensure resolution of security events
• Maintain and improve security incident processes, protocols, and standard operating procedures

Requirements

• Undergraduate or Postgraduate Degree in Computer Science, Engineering, or a related field
• At least 7 years of overall professional experience
• Minimum 5 years of specialized experience in incident response, computer forensics, and SOC operations
• Proficiency in KQL and advanced querying for threat detection
• Hands-on experience with EDR, SIEM, and malware analysis
• In-depth knowledge of Windows and Unix/Linux operating systems
• Willingness to work in shifts

Preferred Qualifications

• Relevant certifications such as SSCP, CEH, GCIH, GCFA, GCIA, GSEC, GIAC, or Security+
• Experience with security incident response in cloud environments, specifically Azure
• Proficiency in scripting or programming (e.g., Python, PowerShell, Shell, C, or C#)
• Knowledge of legal considerations in electronic discovery and analysis

Benefits

• Continuous learning opportunities to develop new mindset and skills
• Flexible working arrangements to support lifestyle balance
• A diverse and inclusive culture that empowers individual voices
• Comprehensive benefits package focusing on physical, emotional, financial, and social well-being

About the Company

EY is a global leader in assurance, consulting, law, strategy, tax, and transactions. We are committed to building a better working world by helping create long-term value for clients, people, and society. Our Information Security team works to protect EY and client information assets through innovative, secure solutions and rapid incident response.