Cyber Triage and Forensic Senior Analyst at EY Los Angeles, CA

Cyber Triage and Forensics (CTF) Incident Analyst will work as a senior member of the technical team responsible for security incident response for EY. The candidate will serve as an escalation point for suspect or confirmed security incidents. Responsibilities include performing digital forensic analysis, following security incident response standard methodologies, malware analysis, identifying indicators of compromise, supporting remediation or coordinating remediation efforts, and developing documentation to support the security incident response process.

• Investigate, coordinate, bring to resolution, and report on security incidents as they are identified
• Forensically analyze end‑user systems and servers found to have possible indicators of compromise
• Analyze artifacts collected during a security incident/forensic analysis
• Identify security incidents through hunting operations within a SIEM, EDR, and other relevant tools
• Interface and connect with server owners, system custodians, and IT contacts to pursue security incident response activities, including obtaining access to systems, digital artifact collection, containment, and remediation actions
• Provide consultation and assessment on perceived security threats
• Maintain, manage, improve, and update security incident processes and protocol documentation
• Regularly provide reporting and metrics on case work
• Resolve security incidents by identifying root cause and solutions
• Analyze findings in investigative matters and develop fact‑based reports
• Be on‑call to deliver global incident response

• Proven integrity and judgment within a professional environment
• Ability to appropriately balance work and personal priorities
• 7+ years experience in incident response, computer forensics analysis, and/or malware reverse engineering
• Understanding of security threats, vulnerabilities, and incident response
• Understanding of electronic investigation, forensic tools, and methodologies, including log correlation and analysis, forensically handling electronic data, knowledge of computer security investigative processes, and malware identification and analysis
• Familiarity with legalities surrounding electronic discovery and analysis
• Experience with EDR and SIEM technologies (e.g., Splunk)
• Deep understanding of both Windows and Unix/Linux operating systems

• Bachelor's or Master's Degree in Computer Science, Information Systems, Engineering, or a related field

• Hold or be willing to pursue related professional certifications such as GCFE, GCFA, or GREM
• Background in security incident response in cloud‑based environments such as Azure
• Programming skills in Power Shell, Python, and/or C/C++
• Understanding of best security practices for network architecture and server configuration

• Demonstrated integrity in a professional environment
• Ability to work independently
• A global mindset for working with diverse cultures and backgrounds
• Knowledgeable in industry standard security incident response processes, procedures, and lifecycle
• Positive attitude and excellent teaming skills
• Excellent social, communication, and writing skills
• Good presentation skills
• Excellent investigative, analytical, and problem‑solving skills

EY offers a comprehensive compensation and benefits package with competitive base salary ranging from $128,100to $239,600 nationwide and $153,800to $272,300 for specific metro areas. Total Rewards include medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Our hybrid model allows 40–60% onsite work for client‑serving roles, with a flexible vacation policy and support for holidays, personal/family care, and other leaves.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans with disabilities.

If you require assistance applying online, you can request an accommodation during any part of the application process.