Cybersecurity - SIEM Services - Senior Consultant

Ernst & Young - Providence, RI

Full-time - Mid Level

Providence, RI

Professional, Scientific, and Technical Services

About the position

As a Senior Consultant in Cybersecurity - SIEM Services at EY, you will play a crucial role in helping clients navigate the complexities of cybersecurity threats. You will leverage your technical expertise and business acumen to enhance and develop security operations, ensuring robust information security strategies are in place. This position involves deploying advanced security solutions, collaborating with a global team of experts, and contributing to the overall mission of improving organizational resilience against cyber threats.

Responsibilities

• Deliver exceptional client services with a focus on Advanced SIEM Platforms.
• Monitor project progress diligently, manage potential risks, and keep key stakeholders updated on progress and expected outcomes.
• Build and maintain strong business relationships with client personnel, positioning yourself as a trusted advisor in the implementation and management of solutions.
• Demonstrate technical expertise and professional knowledge, showing eagerness to absorb new knowledge and adapt to emerging technologies in cybersecurity.
• Exhibit strong business acumen with an understanding of the strategic importance of SIEM technologies in protecting the client's business operations.
• Stay updated on the latest advancements in advisory services capabilities and broader industry knowledge.
• Apply a thorough understanding of complex information systems to identify issues in client engagements and communicate insights effectively to the engagement team and client management.
• Possess a thorough understanding of the incident response process and familiarity with frameworks like MITRE ATT&CK.

Requirements

• A Bachelor's degree and a minimum of 4 years of related work experience, or a Master's degree and approximately 3 years of related work experience in Computer Science, Information Systems, Engineering, Business, or a related major.
• A minimum of 1 year of related work experience with information security systems, including hands-on SIEM technical infrastructure and implementation experience, specifically with Microsoft Sentinel, CrowdStrike NextGen SIEM/LogScale, or Google Chronicle.
• Knowledge of general security concepts and methods, such as vulnerability assessments, privacy assessments, intrusion detection, incident response, and security policy creation.
• Experience in leading process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities into business operations.
• An understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), and security technologies (firewalls, IDS/IPS).
• A valid driver's license in the US and a valid passport are required.
• Willingness and ability to travel domestically and internationally to meet client needs; estimated travel of 25% - 50% is required.
• The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP or equivalent.

Nice-to-haves

• Experience implementing and building SOAR Capability of Microsoft Sentinel, Crowdstrike NextGen SIEM/LogScale, and/or Google Chronicle.
• Experience with Windows, Linux, UNIX, and other major operating systems.
• Understanding of AI Security tools.
• Prior Consulting Experience.
• Experience with programming in Python, C, Java, Perl, Shell, and/or bash shell scripting.
• Familiarity with REST API best practices and usage.
• Familiarity with security technologies (Cloud, DLP, firewalls, IDS/IPS, EDR) and other SOAR products.

Benefits

• Comprehensive compensation package
• Ongoing training and coaching for professional growth
• Supportive work environment with top-tier professionals