EY
Senior SOC (Tier 3) - Cyber Security Consultant
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Full description
Tier 3 SOC Analyst positionKey Responsibilities:
- Lead investigations into major security incidents and data breaches, coordinating with internal and external stakeholders as necessary.
- Conduct proactive threat hunting activities using advanced analytics and threat intelligence.
- Develop and implement advanced detection and response tools, rules, and automation.
- Perform deep-dive forensic analysis on affected systems and networks.
- Mentor and train Tier 1 and Tier 2 analysts on advanced security concepts and incident response techniques.
- Collaborate with threat intelligence teams to contextualize and operationalize threat data.
- Continuously assess and improve SOC processes, technologies, and detection methodologies.
- Prepare detailed incident reports and executive summaries for management and stakeholders.
- Participate and/or lead incident response calls.
- Participate in and lead post-incident reviews and lessons-learned sessions.
- Contribute to tabletop exercises and incident response simulations.
- Support compliance and audit activities as required.
Skills and attributes for success:
- Proficient in SIEM tools such as Splunk, Microsoft Sentinel, etc
- Expert-level knowledge of security monitoring tools, threat analysis, and digital forensics.
- Advanced understanding of cyber threat intelligence and TTPs (tactics, techniques, procedures).
- Ability to lead and coordinate cross-functional response teams under pressure.
- Strong written and verbal communication skills for technical and executive audiences.
- Experience developing and improving SOC processes and technologies.
To qualify for the role, you must have
- Bachelor’s Degree in Information Security/ Computer Science/ Information Technology or any other relevant courses
- 3–5+ years in security operations, incident response, or a related cybersecurity field, with a track record of leading complex investigations.
- Related Certification such as GIAC, GCIA, GCFA, CISSP, OSCP are highly preferred.