CyberSecurity SIEM Engineer (Senior SDC)

EY•Hartford, DC

110d•$77,500 - $160,500•Hybrid

About The Position

EY is hiring a CyberSecurity SIEM Engineer for its Cyber Threat and Vulnerability Management team. The role supports clients in understanding cybersecurity threats and strengthening security operations, with a focus on advanced SIEM platforms and integrating SIEM and SOAR capabilities into business operations. The engineer helps deploy and manage security solutions, contributes to client project delivery, and works with a globally connected team and EY’s Advanced Security Centers to address complex information security issues. The position combines technical expertise and business acumen. The engineer monitors project progress and risks, communicates with stakeholders, develops trusted client relationships, and translates complex information systems and security issues into clear written and verbal communications. The role requires an understanding of incident response and threat detection frameworks, including MITRE ATT&CK. EY describes a flexible, team-led and leader-enabled hybrid model, with external client-serving employees generally working together in person 40–60% of the time over the course of an engagement, project, or year. EY offers ongoing training and coaching, continuous learning, and a comprehensive compensation and benefits package. The listed US base salary range is $77,500–$140,900, with a range of $92,900–$160,500 for the New York City Metro Area, Washington State, and California excluding Sacramento. Individual compensation depends on factors including education, experience, skills, and geography.

Requirements

Bachelor’s degree and at least 4 years of related work experience, or a master’s degree and approximately 3 years of related work experience, in Computer Science, Information Systems, Engineering, Business, or a related major.
At least 1 year of related information security systems experience, including hands-on SIEM technical infrastructure and implementation experience.
Knowledge of security concepts and methods, including vulnerability and privacy assessments, intrusion detection, incident response, MITRE ATT&CK, security policy creation, enterprise security strategies, architectures, and governance.
Experience leading process definition, workflow design, and process mapping, particularly integrating SIEM and SOAR capabilities into business operations.
Understanding of networking, including TCP/IP and the OSI model; Windows, UNIX, and mainframe operating system fundamentals; security technologies such as firewalls and IDS/IPS; and programming or scripting languages such as C, Java, Perl, and Shell.
Valid US driver’s license and valid passport.

Nice To Haves

Experience implementing and building SOAR capability.
Experience with Windows, Linux, UNIX, or other major operating systems.
Understanding of AI security tools.
Prior consulting experience.
Programming experience in Python, C, Java, Perl, Shell, and/or Bash.
Familiarity with REST API best practices and usage.
Familiarity with cloud security, DLP, firewalls, IDS/IPS, EDR, and SOAR products such as Falcon Fusion, Splunk SOAR, Google Chronicle SecOps, LogicApps, and Sentinel.
CISSP, CISM, CISA, CIPT, CIPM, CRISC, or another relevant certification.

Responsibilities

Deliver client services focused on advanced SIEM platforms.
Monitor project progress, manage potential risks, and update key stakeholders on progress and expected outcomes.
Stay informed about business and industry trends relevant to cybersecurity and clients’ businesses.
Build and maintain relationships with client personnel and serve as a trusted advisor in implementing and managing solutions.
Apply technical expertise and professional knowledge while adapting to new cybersecurity technologies.
Use business acumen to understand the strategic importance of SIEM technologies in protecting client operations.
Stay current on advisory services capabilities and broader industry knowledge.
Apply knowledge of complex information systems, IT environments, and industry trends to identify issues in client engagements.
Communicate insights clearly to engagement teams and client management through written correspondence and verbal presentations.
Apply understanding of incident response and frameworks such as MITRE ATT&CK to improve threat detection and response capabilities.
Lead process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities into business operations.