EY Jobs

Job Information

EY GDS Consulting_Security Operations Center Manager in Philippines

GDS Consulting_Security Operations Center Manager

Consulting

Requisition # PHI004MF

Post Date Feb 08, 2021

The opportunity

In your role at EY, you’ll be inspired by a team of the brightest business and technical minds in cyber security. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.

Your key responsibilities

The Security Operations Center Manager is responsible for all internal security operations tasks and management of Security Operations Center and the analyst staff associated with the SOC. The SOC Manager is responsible for the technical and process direction of the Security Operations Center.

The Security Operations Center is responsible to provide 24x7x365 continuous investigation of correlated security event feeds and the appropriate triage and escalation in case of an identified security incident. The Security Operation Center is the primary contact for any suspected security incident and work together with the Incident Response team on resolving incidents and remediating threats.

Skills and attributes for success

  • 3+ years managing a Security Operations Center

  • In-depth familiarity with security policies based on industry standards and best practices

  • Knowledgeable in SOC advancements such as EDR and SOAR

  • Thorough knowledge of SIEM technologies, like Splunk ES or QRadar

  • Experience in designing and building security operations centers

  • Incident management process development and/or incident management experience

  • 5+ years working within the information security field, with emphasis on security operations, incident management, intrusion analysis

  • Experience with security device installations, configuration and troubleshooting (e. g., firewall, IDS, etc.)

  • SOC automation development and cloud operations (e. g. AWS) experience

  • Ability to lead and communicate efficiently within a team environment

  • Advanced technical writing skill

To qualify for the role, you must have

  • Bachelor’s Degree

  • Professional certifications such as SANS GIAC/GCIH

  • Knowledge of: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM)

Ideally, you’ll also have

  • Additional Professional certifications such as CISSP, ISA

What working at EY offers

  • Support, coaching and feedback from some of the most engaging colleagues around

  • Opportunities to develop new skills and progress your career

  • The freedom and flexibility to handle your role in a way that’s right for you

About EY

As a global leader in assurance, tax, transaction and consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities andcreativefreedom to make things better.Whenever you join, however long you stay, theexceptionalEY experience lasts a lifetime.And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.

If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.

Join us in building a better working world.

Apply now.

The opportunity

In your role at EY, you’ll be inspired by a team of the brightest business and technical minds in cyber security. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.

Your key responsibilities

The Security Operations Center Manager is responsible for all internal security operations tasks and management of Security Operations Center and the analyst staff associated with the SOC. The SOC Manager is responsible for the technical and process direction of the Security Operations Center.

The Security Operations Center is responsible to provide 24x7x365 continuous investigation of correlated security event feeds and the appropriate triage and escalation in case of an identified security incident. The Security Operation Center is the primary contact for any suspected security incident and work together with the Incident Response team on resolving incidents and remediating threats.

Skills and attributes for success

  • 3+ years managing a Security Operations Center

  • In-depth familiarity with security policies based on industry standards and best practices

  • Knowledgeable in SOC advancements such as EDR and SOAR

  • Thorough knowledge of SIEM technologies, like Splunk ES or QRadar

  • Experience in designing and building security operations centers

  • Incident management process development and/or incident management experience

  • 5+ years working within the information security field, with emphasis on security operations, incident management, intrusion analysis

  • Experience with security device installations, configuration and troubleshooting (e. g., firewall, IDS, etc.)

  • SOC automation development and cloud operations (e. g. AWS) experience

  • Ability to lead and communicate efficiently within a team environment

  • Advanced technical writing skill

To qualify for the role, you must have

  • Bachelor’s Degree

  • Professional certifications such as SANS GIAC/GCIH

  • Knowledge of: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM)

Ideally, you’ll also have

  • Additional Professional certifications such as CISSP, ISA

What working at EY offers

  • Support, coaching and feedback from some of the most engaging colleagues around

  • Opportunities to develop new skills and progress your career

  • The freedom and flexibility to handle your role in a way that’s right for you

About EY

As a global leader in assurance, tax, transaction and consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities andcreativefreedom to make things better.Whenever you join, however long you stay, theexceptionalEY experience lasts a lifetime.And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.

If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.

Join us in building a better working world.

Apply now.

DirectEmployers