Senior SOC Analyst – Cyber Detection & Response

About the role

As part of EY's cyber security team, you will work as a Senior Analyst assisting clients in detecting and responding to security incidents using SIEM, EDR and NSM solutions. You will provide operational support and guidance to ensure effective containment, eradication and recovery.

Key responsibilities

• Provide operational support using SIEM platforms (Splunk, Azure Sentinel), EDR tools (CrowdStrike, Microsoft Defender, Carbon Black) and NSM solutions (Fidelis, ExtraHop) for multiple customers.
• Perform second‑level incident validation, detailed investigations and coordinate incident response activities with clients.
• Deliver SIEM support activities, including ad‑hoc reporting and basic troubleshooting.
• Advise customers on best practices and use‑case implementation to meet their security objectives.
• Collaborate with clients to ensure effective containment, eradication and recovery of security incidents.

Required profile

• Customer‑service oriented mindset with a commitment to meet client expectations and seek feedback for improvement.
• Strong knowledge of SIEM technologies (Splunk, Azure Sentinel) and ability to troubleshoot related issues.
• Minimum B.Tech/B.E. degree, at least 3 years of hands‑on experience with SIEM/EDR/NSM solutions, and ability to work 24×7 shifts.
• Excellent verbal and written English communication skills and the ability to work with minimal supervision.
• Relevant certifications (e.g., CCSA, CEH, CISSP, GCIH, GIAC) are a plus.

Required skills

• Splunk
• Azure Sentinel
• CrowdStrike
• Microsoft Defender
• Carbon Black
• Fidelis
• ExtraHop
• ELK Stack
• Claroty
• Nozomi Networks
• Tanium
• Regular Expressions (RegEx)
• Perl scripting
• SQL query language

What we offer

• Support, coaching and feedback from engaging colleagues.
• Opportunities to develop new skills and progress your career.
• Freedom and flexibility to handle your role in a way that’s right for you.