Cybersecurity - TVM - SIEM/SOAR - Senior Manager - Location OPEN

EY•Hartford, DC

13d•$170,600 - $443,200•Remote

About The Position

Provide reliable solutions to clients’ intricate technology risks and vulnerabilities as part of the Cyber Threat and Vulnerability Management (TVM) team, playing a pivotal role in understanding and contextualizing clients’ cybersecurity threats, as well as in evaluating, enhancing, and developing their security operations to counter these threats effectively. Spearhead the deployment of cutting-edge security solutions for clients, aiding them in safeguarding their enterprises, collaborating with our Advanced Security Centers, providing access to the most advanced tools to combat cybercrime effectively. Be responsible for managing and delivering multiple processes, projects, or solutions with a focus on quality and risk management. Lead and motivate teams in delivering security and IT risk solutions, fostering an inclusive environment, mentoring junior consultants, and providing technical leadership. Maintain current knowledge of IT and industry trends to address client service issues and deliver exceptional client service, with a focus on advanced SIEM platforms like Microsoft Sentinel, CrowdStrike NextGen SIEM, and Splunk. Build strong client relationships as a trusted advisor in the implementation and management of security solutions. Demonstrate deep technical expertise in advanced SIEM technologies and a commitment to continuous learning in cybersecurity advancements. Understand the strategic importance of SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) in protecting business operations and stay informed on industry developments and advisory services capabilities. Understand the importance of Extract, Transform, and Load (ETL) tools such as Cribl, Databahn, and Apache NiFi in helping clients manage their data streams. Apply knowledge of complex information systems and AI technologies to identify engagement issues and communicate effectively with clients. Possess a thorough understanding of the incident response process and familiarity with frameworks like MITRE ATT&CK to enhance threat detection and response capabilities. Enhance processes continuously and identify innovative solutions through research and best practices. Act as a technical leader, guiding your team to resolve challenges and develop impactful policies and procedures. Engage with clients daily, leading sessions and workstreams, and identifying additional service opportunities. Manage engagement economics and implement resource plans and budgets. Manage and motivate teams of professionals with diverse skills and backgrounds. Consistently deliver quality client services by monitoring progress. Demonstrate in-depth technical capabilities and professional knowledge. Maintain long-term client relationships and networks. Cultivate business development opportunities.

Requirements

Bachelor's degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 5 years of progressive, post-baccalaureate relevant work experience. Alternatively, will accept a Master's degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 4 years of relevant work experience.
6-10 years of experience in information security, with a focus on SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solutions, including hands-on experience with at least one of the following leading platforms: Microsoft Sentinel, CrowdStrike NextGen SIEM, or Google Chronicle.
3 years of experience in consulting, including addressing client needs, developing proposals, and delivering presentations.
2 years of experience with security concepts and methods, including vulnerability assessments, privacy assessments, intrusion detection, incident response (including knowledge of the incident response process and frameworks), security policy creation, enterprise security strategies, architectures, and governance.
2 years of experience in networking, operating system fundamentals, and security technologies, including firewalls or IDS/IPS.
2 years of experience in leading process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities into business operations.

Nice To Haves

Knowledge of ETL tools such as Cribl, Databahn, and Apache NiFi.
Familiarity with MITRE ATT&CK framework.
Experience with AI technologies.

Responsibilities

Manage and deliver multiple processes, projects, or solutions with a focus on quality and risk management.
Lead and motivate teams in delivering security and IT risk solutions, fostering an inclusive environment, mentoring junior consultants, and providing technical leadership.
Maintain current knowledge of IT and industry trends to address client service issues and deliver exceptional client service, with a focus on advanced SIEM platforms like Microsoft Sentinel, CrowdStrike NextGen SIEM, and Splunk.
Build strong client relationships as a trusted advisor in the implementation and management of security solutions.
Demonstrate deep technical expertise in advanced SIEM technologies and a commitment to continuous learning in cybersecurity advancements.
Understand the strategic importance of SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) in protecting business operations and stay informed on industry developments and advisory services capabilities.
Understand the importance of Extract, Transform, and Load (ETL) tools such as Cribl, Databahn, and Apache NiFi in helping clients manage their data streams.
Apply knowledge of complex information systems and AI technologies to identify engagement issues and communicate effectively with clients.
Possess a thorough understanding of the incident response process and familiarity with frameworks like MITRE ATT&CK to enhance threat detection and response capabilities.
Enhance processes continuously and identify innovative solutions through research and best practices.
Act as a technical leader, guiding your team to resolve challenges and develop impactful policies and procedures.
Engage with clients daily, leading sessions and workstreams, and identifying additional service opportunities.
Manage engagement economics and implement resource plans and budgets.
Manage and motivate teams of professionals with diverse skills and backgrounds.
Consistently deliver quality client services by monitoring progress.
Demonstrate in-depth technical capabilities and professional knowledge.
Maintain long-term client relationships and networks.
Cultivate business development opportunities.