Cybersecurity - TVM - Cyber Threat Intelligence - Senior - Location OPEN

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.   The exceptional EY experience. It's yours to build.   EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.  

Cybersecurity – Threat and Vulnerability Management– Cyber Threat Intelligence - Senior

 

In a rapidly changing cybersecurity threat landscape, clients from all industries look to us for trusted solutions for increasingly complex threats and risks. EY's Threat and Vulnerability Management team is at the forefront of protecting organizations from the ever-evolving cyber threats that pose a constant challenge to global business operations. You will get to use your technical and business skills to help us drive this mission and have an impact on cybersecurity at a global level.   

 

The opportunity

Join our dynamic team as a Senior Cybersecurity Response & Investigations Specialist, where you'll be at the forefront of addressing advanced threats and vulnerabilities. You'll play a crucial role in both proactive and reactive strategies to combat cyber incidents and conduct thorough root cause analysis. Your expertise in digital forensics will be vital in investigating incidents, shaping future mitigation strategies, and managing forensic artefacts for compliance and law enforcement purposes.

 

Your key responsibilities

As a Senior Specialist, you'll deliver processes, solutions, or projects with a keen understanding of success criteria and potential risks. Your responsibilities will include driving sales, business growth, solution development, and promoting effective teaming. You'll maintain billability by serving external clients, managing projects, and participating actively in client sessions. Expect frequent client interactions, contributing significantly as a workstream member or team lead.

• Drive sales and business development efforts
• Manage projects and client relationships
• Participate in client working sessions and contribute to team success

 

Skills and attributes for success

To thrive in this role, you'll need a blend of technical and business skills, along with the ability to navigate complex problems and make informed decisions. Your professional knowledge and experience will guide you in adhering to broad policies and tackling issues with in-depth evaluations.

• Demonstrate advanced problem-solving and critical thinking skills
• Exhibit digital and learning agility
• Foster a collaborative learning environment

 

 

To qualify for the role, you must have

• A Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, or a related.
• 2 to 4 years of relevant experience in cyber threat intelligence or a related field.
• Strong critical thinking skills, including the ability to analyze and compare multiple sources and reports.
• Demonstrated experience with common standards such as STIX/TAXII, ICD203 & ICD206, DHS TLP, etc. and a thorough understanding of the intelligence lifecycle.
• The ability to conduct research and Open-Source Intelligence (OSINT) while understanding the importance of leveraging primary sources and validating findings.
• An understanding of usage and operationalization of Threat Intelligence Platforms (TIPs) and experience conducting research and analysis using common CTI tools, whether open or closed source.
• Deep understanding of frameworks and concepts such as atomic Indicators of Compromise (IOCs), MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), the Pyramid of Pain, and higher-level behavioral patterns.
• Knowledge of threat actor motivations, resourcing, and goals, including Advanced Persistent Threat (APT) actors, cybercriminals, and hacktivist groups.