Cybersecurity - SIEM Services - Senior Consultant

Ernst & Young - Stamford, CT

Full-time - Mid Level

Stamford, CT

Professional, Scientific, and Technical Services

About the position

As a Senior Consultant in Cybersecurity - SIEM Services at EY, you will play a crucial role in helping clients navigate the complex landscape of cybersecurity threats. Your responsibilities will include deploying advanced security solutions, enhancing security operations, and providing expert guidance to clients on managing their cybersecurity risks. This position requires a blend of technical expertise and business acumen, allowing you to make a significant impact on the security posture of various organizations.

Responsibilities

• Deliver exceptional client services with a focus on Advanced SIEM Platforms.
• Monitor project progress diligently, manage potential risks, and keep key stakeholders updated on progress and expected outcomes.
• Build and maintain strong business relationships with client personnel, positioning yourself as a trusted advisor.
• Demonstrate technical expertise and professional knowledge in cybersecurity.
• Exhibit strong business acumen with an understanding of the strategic importance of SIEM technologies.
• Stay updated on the latest advancements in advisory services capabilities and broader industry knowledge.
• Apply a thorough understanding of complex information systems to identify issues in client engagements.
• Effectively communicate insights to both the engagement team and client management through clear written correspondence and articulate verbal presentations.
• Possess a thorough understanding of the incident response process and frameworks like MITRE ATT&CK.

Requirements

• A Bachelor's degree and a minimum of 4 years of related work experience, or a Master's degree and approximately 3 years of related work experience in Computer Science, Information Systems, Engineering, Business, or a related major.
• A minimum of 1 year of related work experience with information security systems, including hands-on SIEM technical infrastructure and implementation experience.
• Knowledge of general security concepts and methods, such as vulnerability assessments, privacy assessments, intrusion detection, and incident response.
• Experience in leading process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities.
• An understanding of networking (TCP/IP, OSI model), operating system fundamentals, and security technologies.
• A valid driver's license in the US and a valid passport are required.
• Willingness and ability to travel domestically and internationally to meet client needs; estimated travel of 25% - 50% is required.
• The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP.

Nice-to-haves

• Experience implementing and building SOAR Capability of Microsoft Sentinel, Crowdstrike NextGen SIEM/LogScale, and/or Google Chronicle.
• Experience with Windows, Linux, UNIX, and other major operating systems.
• Understanding of AI Security tools.
• Prior Consulting Experience.
• Experience with programming in Python, C, Java, Perl, Shell, and/or bash shell scripting.
• Familiarity with REST API best practices and usage.
• Familiarity with security technologies (Cloud, DLP, firewalls, IDS/IPS, EDR, etc.) and other SOAR products.

Benefits

• Comprehensive compensation package
• Ongoing training and coaching for professional growth
• Supportive work environment with top-tier professionals