Cyber Detection & Response Engineer, Senior

About the role

EY is seeking a senior Cyber Detection & Response Engineer to design, build, and manage advanced security solutions across platforms. You will work with a team of top cyber security professionals to protect client data and infrastructure.

Key responsibilities

• Plan, design, implement, manage and upgrade security systems such as SOAR, SIEM, EDR, XDR, NGAV, cloud and network security solutions.
• Continuously review and enable appropriate security controls, conduct capacity planning, and recommend hardware refreshes.
• Develop security project plans for SIEM, NDR, XDR, NGAV, NGFW, MDM, DLP, SWG, UEBA on cloud and DevOps environments following a zero‑trust framework.
• Document project steps, lessons learned and collaborate with technical teams for integration and deployment.

Required profile

• Minimum 6+ years of cybersecurity design, build and implementation experience in large‑scale environments.
• At least 3 years of hands‑on experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar) and scripting in Python.
• Strong knowledge of endpoint, web, network, and data loss prevention security technologies.
• Bachelor’s degree in IT or Computer Science and relevant certifications (e.g., CEH, Sec+, GCIH).

Required skills

• SIEM platforms: Splunk, Microsoft Sentinel, QRadar, ArcSight, LogRhythm.
• SOAR tools: Phantom, Demisto.
• Endpoint and XDR solutions: CrowdStrike, Microsoft Defender, Cortex XSIAM, Carbon Black, Sophos.
• Security assessment tools: NMAP, Nessus, Metasploit, Netcat.
• Security frameworks: SANS Critical Security Controls, OWASP Top 10, MITRE ATT&CK, PCI‑DSS, ISO 27001/02, SOC 2, GDPR.
• Programming/scripting: Python, regular expressions, natural language queries.

What we offer

• Support, coaching and feedback from experienced colleagues.
• Opportunities to develop new skills, progress your career and flexible work arrangements.