CyberSecurity SIEM Engineer (Senior SDC)
About the role
The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
Responsibilities
- Deliver exceptional client services with a focus on Advanced SIEM Platforms.
- Maintain project progress, manage risks, and keep stakeholders informed.
- Stay informed about business and industry trends, especially cybersecurity.
- Build and maintain strong business relationships with client personnel.
- Show technical expertise and adapt to emerging technologies.
- Show business acumen and understand the strategic importance of SIEM.
- Understand complex information systems and apply knowledge to client engagements.
- Communicate insights clearly through written and verbal presentations.
- Understand incident response processes and frameworks like MITRE ATT&CK.
Requirements
- A Bachelor's degree and 4+ years of related work experience, or a Master’s degree and 3+ years of related work experience.
- Minimum 1 year of related work experience with information security systems.
- Knowledge of security concepts, vulnerability assessments, privacy assessments, intrusion detection, incident response, MITRE ATT&CK, security policy, architecture, and governance.
- Experience in process definition, workflow design, and process mapping.
- Understanding of networking, operating systems, security technologies, and application programming/scripting languages.
- Valid driver's license in the US and a valid passport.
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, Business, or a related major.
- Experience with SIEM technical infrastructure and implementation.
- Experience with SOAR capability implementation and building.
- Experience with Windows, Linux, UNIX, and other major operating systems.
- Understanding of AI Security tools.
- Experience with programming in Python, C, Java, Perl, Shell.
- Familiarity with REST API best practices and usage.
- Experience with security technologies (Cloud, DLP, firewalls, IDS/IPS, EDR, etc.) and SOAR products (Falcon Fusion, Splunk SOAR, Google Chronicle SecOps, LogicApps, Sentinel, etc.).
- Certification such as CISSP, CISM, CISA, CIPT, CIPM, CRISC.
Skills
- Technical expertise with advanced SIEM platforms.
- Business acumen and understanding of SIEM's strategic importance.
- Ability to communicate insights clearly.
- Understanding of incident response processes and MITRE ATT&CK.
Benefits
Comprehensive compensation and benefits package including medical and dental coverage, pension, 401(k) plan, and flexible vacation policies.
Pay
$77,500 to $140,900 for the base salary range in all geographic locations in the US. The range for New York City Metro Area, Washington State, and California (excluding Sacramento) is $92,900 to $160,500.
Schedule
Our expectation is for most people in external, client-serving roles to work together in person 40-60% of the time over the course of an engagement, project, or year. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed.