Jobiglo

No results.

Senior Incident Response Analyst – Cyber Detection & Response

EY · Taguig

New
Senior 🇬🇧 English
Splunk Microsoft Sentinel CrowdStrike XSOAR AWS Azure GCP MITRE ATT&CK digital forensics threat hunting log analysis packet inspection malware triage

Job description

About the role

As a Senior Incident Response Analyst you will lead EY’s global cybersecurity operations, detecting, investigating, containing and remediating complex security incidents across cloud, on‑premise and hybrid environments. You will work with cutting‑edge tools and mentor junior analysts while shaping proactive defense strategies.

Key responsibilities

  • Conduct Tier 3 security incident response for application, network and infrastructure alerts, using documented procedures and in‑house security technologies.
  • Assign containment, eradication and recovery tasks, coordinate with resource teams and communicate status to stakeholders, including executive management.
  • Perform response actions on managed hosts, isolate compromised systems and execute pre‑approved remediation steps.
  • Lead peer reviews of Tier 2 analyst work, provide feedback and drive continuous improvement of incident response processes and playbooks.
  • Document incidents, actions taken and lessons learned; analyze data to identify patterns and improve detection capabilities.

Required profile

  • 3‑5 years of experience in cybersecurity operations, preferably in a SOC or similar environment.
  • Proven experience in incident response, threat hunting and digital forensics within enterprise or managed security settings.
  • Strong analytical, problem‑solving and decision‑making abilities, with capacity to work under pressure and manage multiple incidents.
  • Excellent communication skills to convey technical findings to both technical and non‑technical audiences.

Required skills

  • SIEM tools such as Splunk or Microsoft Sentinel.
  • EDR platforms like CrowdStrike and Microsoft Defender for Endpoint.
  • SOAR automation frameworks (e.g., XSOAR).
  • Cloud platforms: AWS, Azure, GCP.
  • Knowledge of MITRE ATT&CK framework and threat intelligence integration.
  • Experience with log analysis, packet inspection and malware triage.
  • Relevant certifications (e.g., GCIH, GCFA, CEH, CISSP) are a strong advantage.

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec EY.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Why are you reporting this job?

Thank you for your report. We will review this job.

Apply in 30 seconds

Enter your email to apply. An account will be created automatically.

Apply now →

By continuing, you accept our terms of use.

Already have an account? Login

A question about this job?

Ask it here: you will get the full job summary by e-mail, right away.

💬 Chat with us on Telegram

Published 6 days ago

Expires 1 month from now

34 views · 0 interested

Boost your chances

Upload your CV — we will match you with relevant openings.

Analyzing your CV...

EY

Taguig