Location: Anywhere in Country

Provide reliable solutions to clients' intricate technology risks and vulnerabilities as part of the Cyber Threat and Vulnerability Management (TVM) team, playing a pivotal role in understanding and contextualizing clients' cybersecurity threats, as well as in evaluating, enhancing, and developing their security operations to counter these threats effectively. Spearhead the deployment of cutting-edge security solutions for clients, aiding them in safeguarding their enterprises, collaborating with our Advanced Security Centers, providing access to the most advanced tools to combat cybercrime effectively. Be responsible for managing and delivering multiple processes, projects, or solutions with a focus on quality and risk management. Lead and motivate teams in delivering security and IT risk solutions, fostering an inclusive environment, mentoring junior consultants, and providing technical leadership. Maintain current knowledge of IT and industry trends to address client service issues and deliver exceptional client service, with a focus on advanced SIEM platforms like Microsoft Sentinel, CrowdStrike NextGen SIEM, and Splunk. Build strong client relationships as a trusted advisor in the implementation and management of security solutions. Demonstrate deep technical expertise in advanced SIEM technologies and a commitment to continuous learning in cybersecurity advancements. Understand the strategic importance of SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) in protecting business operations and stay informed on industry developments and advisory services capabilities. Understand the importance of Extract, Transform, and Load (ETL) tools such as Cribl, Databahn, and Apache NiFi in helping clients manage their data streams. Apply knowledge of complex information systems and AI technologies to identify engagement issues and communicate effectively with clients. Possess a thorough understanding of the incident response process and familiarity with frameworks like MITRE ATT&CK to enhance threat detection and response capabilities. Enhance processes continuously and identify innovative solutions through research and best practices. Act as a technical leader, guiding your team to resolve challenges and develop impactful policies and procedures. Engage with clients daily, leading sessions and workstreams, and identifying additional service opportunities. Manage engagement economics and implement resource plans and budgets.

Manage and motivate teams of professionals with diverse skills and backgrounds. Consistently deliver quality client services by monitoring progress. Demonstrate in-depth technical capabilities and professional knowledge. Maintain long-term client relationships and networks. Cultivate business development opportunities.

Education and Basic Experience Requirements:

Must have a Bachelor's degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 5 years of progressive, post-baccalaureate relevant work experience. Alternatively, will accept a Master's degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 4 years of relevant work experience.

Specific Skills/Experience Requirements:

• Must have 6-10 years of experience in information security, with a focus on SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solutions, including hands-on experience with at least one of the following leading platforms: Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle.
• Must have 3 years of experience in consulting, including addressing client needs, developing proposals, and delivering presentations.
• Must have 2 years of experience with security concepts and methods, including vulnerability assessments, privacy assessments, intrusion detection, incident response (including knowledge of the incident response process and frameworks), security policy creation, enterprise security strategies, architectures, and governance.
• Must have 2 years of experience in networking, operating system fundamentals, and security technologies, including firewalls or IDS/IPS.
• Must have 2 years of experience in leading process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities into business operations.

Travel

Overall Percentage - 80%

• Percentage of the overall travel that is Domestic - 90%
• Percentage of the overall travel that is International, if applicable - 10%

Employer will accept any suitable combination of education, training, or experience.

What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $204,800 to $425,500
  • Bay Area California offices - $213,300 to $443,200
  • All other offices locations in the US, including Sacramento - $170,600 to $390,000
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Are you ready to shape your future with confidence? Apply today.

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click here for additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.