Government and Public Sector - Service Delivery Center - Cyber - SOC Senior Analyst - Shift Work

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.   The exceptional EY experience. It's yours to build.   EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.  

From strategy to execution, the Government & Public Sector practice of Ernst& Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

 

The Opportunity 

 

The Service Delivery Center is made up of high-performing, US-based resources who work closely with our experienced professionals to deliver project-based work and managed services to our federal clients. The Service Delivery Center is a core component of the Government & Public Sector practice (GPS).

 

Cyber threats continue to evolve and pose serious risks within the business environment. Our Cybersecurity – NextGen Security Operations Center (SOC) services assist our clients to defend their environment and respond when threats are detected utilizing sophisticated tools available to fight against cybercrime.

 

Your Key Responsibilities

 

The Senior Analyst provides seasoned cybersecurity troubleshooting, analysis, and technical expertise, oversees the work of junior team members, and serves as escalation point for more complex technical issues.

• Provide technical guidance in NextGen SOC service operations and delivery to other junior members of the SDC team
• Collaborate with on-site GPS NextGen SOC consultants in identifying process improvements, enhancing existing NextGen SOC solutions and operating NextGen SOC processes as required
• Monitor progress and manage risk while ensuring stakeholders are kept informed about progress and expected outcomes
• Leverage knowledge of industry trends to identify engagement and client service issues; communicate this information to the on-site engagement team through written correspondence and verbal presentations.
• Additional responsibilities include the following areas:
  • Analyze persistent vulnerabilities, perform root cause analysis and investigate potential false positives
  • Perform configuration and deploy vulnerability scanning, dynamic application security scanners, and network assessment tools
  • Track vulnerabilities from discovery through remediation
  • Provide guidance to junior staff on vulnerability remediation, countermeasures, and risk mitigation
  • Responsible for full-spectrum incident response including event discovery, alert notification, investigation, facilitation of containment, facilitating of resolution, and event reporting
  • Perform the activities necessary for the immediate, short-term rapid resolution of incidents to minimize risk exposure and production down-time
  • Proactive monitoring of internal and external-facing environment using specialized security applications
  • Proactively research and monitor security-related information sources to aid in the identification of threats to client networks, systems and intellectual property
  • Use MITRE ATT&CK, VERIS, and Kill Chain concepts to develop, prioritize and execute threat hunting and attack and penetration scenarios relative