Security Analyst / SOC Analyst

Job title: Security Analyst / SOC Analyst

About the Role As part of EY's cybersecurity team, you will serve as a SOC analyst helping clients detect and respond to security incidents with support from SIEM, EDR and NSM solutions. You will work with multiple customers to monitor, triage and investigate security events, providing timely analysis and reporting.

What You'll Do

• Operational for SIEM (Splunk, Sentinel, CrowdStrike Falcon LogScale), EDR (Defender, CrowdStrike, Carbon Black), NSM (Fidelis, ExtraHop) across multiple customers.
• First level monitoring and triaging of security alerts.
• Initial data gathering and investigation using SIEM, EDR, NSM.
• Provide near real-time analysis, investigation and reporting of security incidents for customers.

What We're Looking For

• Customer Service oriented and able to meet commitments; seek feedback for improvement.
• Hands-on knowledge of SIEM technologies (Splunk, Azure Sentinel, CrowdStrike Falcon LogScale) from a security analyst perspective.
• Exposure to IoT/OT monitoring (Claroty, Nozomi Networks) is a plus.
• Strong knowledge and experience in Security Monitoring and Cyber Incident Response.
• Knowledge of network monitoring platforms (Fidelis XPS, ExtraHop).
• Knowledge of endpoint protection tools and platforms (Carbon Black, Tanium, CrowdStrike, Defender).
• B.Tech./B.E. with solid technical skills; ability to work in 24x7 shifts.
• Strong command of verbal and written English; good interpersonal and presentation skills.
• Hands-on experience in SIEM, EDR and NSM; certifications in SIEM platforms desirable.
• Knowledge of RegEx, Perl scripting and SQL queries.
• Certifications such as CEH, ECSA, ECIH, Splunk Power User are a plus.

Nice to Have

• Additional SIEM certifications and tooling experience.

Compensation & Benefits

• EY offers coaching and feedback, opportunities to develop new skills and progress your career, and a flexible, interdisciplinary environment.