GMS-Senior-SIGDEV
GMS-Senior-SIGDEV
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.
Senior - Signature Development
KEY Capabilities:
- Experience in working with SIEM Solutions such as Splunk or Azure Sentinel.
- Experience in working with any of Endpoint Detection and Response tools preferably Crowdstrike Sentinel One or Microsoft Defender for Endpoint.
- Expertise in SIEM and EDR content development with an eye towards behavior-based detection logic.
- Strong background in host based and network-based behaviors.
- Familiarity of Windows Event IDs and common application logs.
- Knowledge in programming or scripting languages such as Batch Scripting Python PowerShell etc.
- Experience in purple teaming activities.
- Hands-on experience on threat Hunting for identification of interested events for content development.
- Analyze and investigate broad range of threats or cyber activities occurring on daily basis.
- Provide actionable insights to help identify detect prevent and respond to potentially malicious activities.
Qualification and experience:
- Minimum of 3 to 7 years experience with in-depth host network architecture knowledge that will translate over to effective content development.
- Minimum of 3 years SOC experience.
- An adversarial mindset understanding the goals behaviors and TTPs of threat actors.
- Strong oral written and listening skills are an essential component to effective consulting.
- Ability to work at all layers of the OSI models including being able to explain communication at any level is necessary.
- Must have content development knowledge in Endpoint Detection and Response (Defender/CrowdStrike) SIEM (Splunk/Sentinel).
- Must have knowledge of Windows and Linux basics including command and script interpreters PowerShell registries etc.
- Troubleshoot EDR and SIEM platform and application issues escalate and work with relevant teams to resolve issues.
- Certifications in a core security related discipline will be an added advantage.
- Certification in any one of the SIEM EDR or Network Solutions such as Splunk Azure Sentinel Falcon Crowdstrike SentinelOne will be an added advantage.
EY Building a better working world
EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.
Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.
Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.
Required Experience:
Director
Employment Type
Full Time
