CyberSecurity SIEM Engineer; Senior SDC

Location:

Anywhere in Country

Cyber Security SIEM Engineer (Senior SDC)

Join a global team focused on Cyber Threat and Vulnerability Management (TVM). In this role you will analyze, design, and implement SIEM solutions, work closely with clients to assess risk, and drive continuous improvement of security practices. EY values integrity and expects all candidates to uphold high ethical standards.

• Deliver client services around Advanced SIEM Platforms, monitor project progress, manage risks, and keep stakeholders updated.
• Build and maintain strong client relationships, acting as a trusted advisor for solutions implementation and management.
• Demonstrate technical expertise and a willingness to learn new technologies in cybersecurity.
• Show business acumen regarding the strategic importance of SIEM technologies for client operations.
• Stay current on advisory services capabilities and broader industry trends.
• Apply deep knowledge of complex information systems and communicate insights effectively to teams and clients.
• Understand incident response processes, including frameworks such as MITRE ATT&CK, to enhance threat detection and response.

• Bachelor’s degree and ≥4 years of related work experience, or Master’s degree and ≈3 years of related experience in Computer Science, Information Systems, Engineering, Business, or a related field.
• ≥1 year of experience with information security systems, including hands‑on SIEM technical infrastructure and implementation.
• Knowledge of security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, MITRE ATT&CK Framework, security policy creation, enterprise security strategies, architectures, and governance.
• Experience in process definition, workflow design, and mapping, especially integrating SIEM and SOAR capabilities into business operations.
• Understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.), and programming/scripting languages (C, Java, Perl, Shell).
• Valid U.S. driver’s license and passport.

• Experience implementing and building SOAR Capability.
• Experience with Windows, Linux, UNIX, and other major operating systems.
• Understanding of AI Security tools.
• Prior consulting experience.
• Programming skills in Python, C, Java, Perl, Shell and/or Bash scripting.
• Familiarity with REST API best practices and usage.
• Familiarity with security technologies (Cloud, DLP, firewalls, IDS/IPS, EDR, etc.) and other SOAR products (Falcon Fusion, Splunk SOAR, Google Chronicle Sec Ops, Logic Apps, Sentinel, etc.).
• Certifications such as CISSP, CISM, CISA, CIPT, CIPM, CRISC or other relevant credential.

Intellectually curious individuals with a passion for cyber security, strong presentation and technical abilities, and the confidence to grow into a leading expert.

• Continuous learning and skill development.
• Flexibility and tools to make a meaningful impact.
• Transformative leadership coaching.
• Diverse and inclusive culture.

• Base salary ranges from $77,500 to $140,900 nationwide, with higher ranges for major metros.
• Full medical, dental, pension, and 401(k) plans.
• Paid time off, flexible vacation policy, and holiday schedule.
• Hybrid work model: 40–60% on‑site engagement, with flexibility based on role.

EY is an equal‑employment‑opportunity employer and complies with all applicable law. We provide reasonable accommodations for qualified individuals with disabilities. For more information, contact EY talent support.