Job Description

Location: McLean Date: Mar 23, 2025 Requisition ID: 1577415 At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. Join us and build an exceptional experience for yourself, and a better working world for all. The opportunity Our cybersecurity professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. The team works together in planning, pursuing, delivering and managing engagements to assess, improve, build, and in some cases operate integrated security operations for our clients. Your key responsibilities Conduct real-time security monitoring, log analysis, and threat detection using SIEM tools such as Splunk, Elastic, Microsoft Sentinel, CrowdStrike NG-SIEM, and Palo Alto Cortex. Perform threat hunting and anomaly detection by analyzing security event data and network traffic for malicious activity. Integrate cyber threat intelligence (CTI) into detection methodologies, correlating indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) to strengthen defenses. Respond to cybersecurity incidents, conduct forensic investigations, and provide mitigation recommendations. Develop and fine-tune detection rules, alerts, and use cases for monitoring tools to improve incident detection and response. Conduct malware analysis, reverse engineering, and threat intelligence correlation to improve defensive strategies. Work closely with Red and Purple Teams to simulate adversary tactics, improve detection efficacy, and test security defenses in adversary emulation exercises. Provide guidance on security best practices, hardening techniques, and zero-trust architectures. Automate security operations and develop playbooks using SOAR platforms to improve response efficiency. Conduct security assessments and assist with compliance efforts for industry standards such as MITRE ATT&CK, NIST 800-53, ISO 27001, and CIS Benchmarks. To qualify for the role you must have Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, and a minimum of 5 years of related work experience; or a Master’s degree and 4 years of related work experience in security operations, threat detection, or incident response. Any one or more of the following certifications: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CISA (Certified Information Systems Auditor) OSCP (Offensive Security Certified Professional) SANS GIAC certifications, such as: GSE (GIAC Security Expert) GCFA (Forensic Analyst) GNFA (Network Forensic Analyst) GDAT (Defending Advanced Threats) GMON (Continuous Monitoring and Security Operations) GCIH (Incident Handler) GREM (Reverse Engineering Malware) GSOC (Security Operations Center) GCIA (Intrusion Analyst) GCED (Enterprise Defender) Hands-on experience with SIEM, SOAR, EDR, NDR, email security and security monitoring platforms. Strong understanding of network security, cloud security (AWS, Azure, GCP), and endpoint protection strategies. Experience with log analysis, network traffic analysis, and behavioral analytics for identifying suspicious activity. Strong scripting and automation skills in Python, PowerShell, or Bash to streamline security operations. Experience with MITRE ATT&CK framework, adversary emulation, and threat intelligence integration. Must have an active TS/SCI clearance with eligibility for a polygraph and be able to maintain it. Must be willing to work on-site as needed by the client in the greater Washington, DC area. Ideally, you'll also have Prior consulting experience. Experience developing custom threat detection analytics and behavioral anomaly detection rules. Familiarity with cloud-native security monitoring tools (AWS GuardDuty, Azure Security Center, Google Chronicle). Experience with deception technologies, honeypots, and adversary engagement techniques. Deep understanding of Active Directory security, Kerberos attacks, and lateral movement techniques. Experience working in Cloud/Container environments. Penetration Testing experience. Application Security experience. What we look for We’re interested in intellectually curious people with a genuine passion for cybersecurity. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you. What we offer We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way. Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs. EY accepts applications for this position on an on-going basis. If you can demonstrate that you meet the criteria above, please contact us as soon as possible. EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. #J-18808-Ljbffr Ernst & Young Advisory Services Sdn Bhd

Job Tags

Similar Jobs