E

Ernst & Young

Global professional services: audit, tax, consulting

GMS-Manager-SecOps-Sentinel

Security Operations & Incident ResponsePosted on Nov 13
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • Hands-on expertise with SIEM technologies such as Microsoft Sentinel and Splunk from a security analyst’s perspective.
  • Expert knowledge and experience in security monitoring.
  • Expert knowledge and experience in cyber incident response.
  • Knowledge of cloud security and Internet of Things/operational technology is a value add.
  • Knowledge of network monitoring platforms such as Fidelis XPS and ExtraHop.
  • Knowledge of endpoint protection tools, techniques, and platforms such as Carbon Black, Defender, and CrowdStrike.
  • Ability to work with minimal supervision or oversight.
  • Customer-service orientation, including meeting customer commitments and seeking feedback to identify improvement opportunities.
  • B.Tech. or B.E. with sound technical skills.
  • Ability to work in the client’s time zone.
  • Strong command of verbal and written English.
  • Technical acumen and critical-thinking abilities.
  • Strong interpersonal and presentation skills.
  • Minimum 10 years of hands-on experience operating, implementing, or designing SIEM solutions, and proven project-management experience.
  • Certification in any SIEM platform.
  • Knowledge of regular expressions, Perl scripting, and SQL query language is a value add.
  • Certification in CISM, CEH, CISSP, GCIH, GIAC, SABSA, or TOGAF.
  • Proven experience leading operations for SOC projects, with hands-on experience in SIEM configuration and setup.

Responsibilities

  • Oversee the detection, reporting, and response process for security incidents, ensuring the SOC team effectively manages incidents.
  • Manage the security tools and technologies used by the SOC team, ensuring they are properly configured and maintained to monitor and detect security threats.
  • Lead and manage the security operations center, primarily responsible for security event monitoring of client networks.
  • Define, track, and meet service-level agreements for all clients.
  • Provide technical leadership and advice to junior team members on SOC activities.
  • Revise standard operating policies and procedures as required and ensure the team follows them.
  • Identify opportunities to improve security monitoring and operational tasks.
  • Convey complex technical security concepts to technical and non-technical audiences, including executives.
  • Develop and maintain productive working relationships with client personnel.
  • Oversee daily SOC tasks that can be automated.
  • Provide a strategic view and benefits to clients and work with limited resources to achieve them.

About the Company

Ernst & Young

Global professional services: audit, tax, consulting

EY provides professional services across Assurance, Tax, Consulting, and Strategy & Transactions through member firms coordinated by EY Global. It serves clients in about 150 countries with cross-disciplinary teams delivering audits, tax planning, technology, risk management, and M&A and strategy advisory. Its global, integrated platform and large network differentiate it by offering coordinated services across disciplines. The goal is to help clients meet regulatory requirements, improve governance and performance, and create value.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs