Join EY to build a career that's as unique as you are. Leverage global scale, support, and an inclusive culture to achieve your best. Your distinct voice and perspective are crucial in helping EY evolve. Be part of creating an exceptional experience for yourself and a better working world for everyone.

Collaborate with clients to define automation strategies and develop creative integrations and playbooks. Partner with team members to devise practical solutions for client challenges. Execute and maintain Sentinel SOAR analytical processes. Manage and administer the Sentinel SOAR platform. Develop custom scripts and playbooks for task automation and response actions. Create efficient, reusable Python-based playbooks.

Utilize Splunk SOAR for automation and orchestration across various tools. Partner with security operations, threat intelligence, and incident response teams. Assist in developing technical content, including automation scripts, reference architectures, and white papers. Conceptualize and implement automation for business process workflows. Support and mitigate production issues, coordinating with vendors for incident closure based on severity. Review and develop remediation action plans for engagement aspects.

A minimum of 3 years of experience in cybersecurity, with deep network architecture knowledge applicable to deploying Sentinel SOAR in global enterprises. Strong Python programming, REST API, and JSON skills are essential, along with basic SQL. Experience with Incident Response and Threat Intelligence tools is required. Familiarity with SIEM solutions like Splunk and Microsoft Sentinel, and log management platforms, is crucial. Experience in a Security Operations Center environment is beneficial. Basic knowledge of network monitoring platforms and endpoint protection tools is also noted.

Requires a degree in a technical field such as computer science, mathematics, or engineering. A minimum of 2 years of experience working specifically with SOAR (Sentinel) is necessary. Strong communication skills, both oral and written, are vital for effective consulting. Demonstrable experience with scripting technologies like Python, REST, JSON, SOAP, ODBC, and XML is a must. Quick adaptability to new applications and a solid understanding of Cybersecurity and Incident Response Management are expected. Certifications in SIEM solutions or core security disciplines are advantageous.