E

Ernst & Young

Global professional services: consulting, assurance, tax

Cyber SOC L3 – Senior - Ey Gds Spain, Hybrid

Security Operations & Incident ResponseUpdated on Nov 14
Full-timeMálaga, SpainNo salary listed

About the Job

Requirements

  • Experience with digital forensics tools and techniques to investigate incidents.
  • Proficiency in SIEM solutions such as Splunk, Microsoft Sentinel, LogScale, Google Chronicle, IBM QRadar, or equivalent tools for incident response and analysis.
  • Experience leveraging EDR/XDR solutions such as CrowdStrike, Microsoft Defender, SentinelOne, Cortex XSIAM, Carbon Black, or similar platforms.
  • Understanding of security principles, techniques, and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
  • In-depth knowledge of network protocols, operating systems, and security technologies.
  • Proficiency in incident detection and response tools.
  • Familiarity with malware analysis and reverse engineering.
  • Proficiency in scripting languages such as Python or PowerShell for automating tasks and processes.
  • Five or more years of security-related experience in security operations, incident response, and forensic investigation.
  • Willingness to work shifts in a 24/7 operations center.
  • Bachelor’s degree relevant to Information Technology is desirable.
  • Related certifications such as CEH, CHFI, Security+, ITILv3, GCFA, ECIH, GCIH, or CySA+ are desirable.

Responsibilities

  • Lead the response to high-severity incidents, coordinating with other teams as necessary.
  • Gather and preserve evidence, perform data collection, conduct structured analysis of forensic data, and present findings to stakeholders.
  • Work closely with other IT and security teams to address security incidents.
  • Conduct investigations to determine the root cause of incidents.
  • Analyze and interpret packet captures using network protocol analyzers such as Wireshark and TCPdump.
  • Perform endpoint analysis, live response, and memory collection and analysis.
  • Proactively search for threats and vulnerabilities within the environment.
  • Analyze threat intelligence to identify potential risks.
  • Formulate response and recovery steps for security incidents.
  • Review and improve incident response processes and playbooks.
  • Document incidents, response actions, and lessons learned.
  • Prepare detailed incident reports and executive summaries for management and stakeholders.
  • Participate in and/or lead incident response calls.
  • Participate in post-incident reviews to assess response effectiveness and identify areas for improvement.
  • Provide guidance and mentorship to lower-level incident responders.

Desired Qualifications

  • Aptitude to learn new information and processes quickly.
  • Strong problem-solving abilities for analyzing complex incidents.
  • Excellent verbal and written communication skills.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs