Ernst & Young

Level 3 Security Operations Specialist

If we inspire you to do the work you love, will you still call it work?

At EY we believe that whoever you are, your uniqueness helps us stand apart.

We bring together extraordinary people, like you, to build a better working world.

What’s in it for you?

As our experienced L3 Security Operations Specialist, you will play a vital role in providing cybersecurity and incident response services for our clients, performing highly advanced and proactive threat hunting activities to protect our clients from cyber threats. You will be a key influencer in strategic cybersecurity decisions. You will operate with a high degree of autonomy, co-ordinating incident response on a day-to-day basis and leading continuous improvement in L1 and L2 triage processes. You will also perform regular threat hunting, based on available threat intelligence as well as your own developed hypothesis. Your analysis will lead to better detection capability for our services, and better protections for the clients we serve.

In summary, you will:

• Oversee Security Monitoring tools, processes and systems to detect and respond to security events in real-time, working closely with other IT and security teams to enhance security posture.
• Proactively search for threats and vulnerabilities within the network and systems used by our clients
• Conduct in-depth analysis of security threats and incidents, including forensic analysis and root cause determination, providing guidance and training to junior analysts and other team members on security best practices and incident response procedures.

What we’re looking for

Here’s our ‘wish list’ but don’t worry if you don’t tick all the boxes. We’re interested in your strengths, what you want to learn, and how far you want to go.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum 5-7 years of experience in a SOC or security analyst role, with a minimum 3 years experience as an L3 specialist.
• In-depth knowledge of Sentinel, MS Defender, other Threat centric tools, IDS/IPS, email security, vulnerability scanners and other security technologies.
• Strong understanding of incident response frameworks and best practice, with experience leading the investigation and response to security incidents using advanced technical skills and threat intelligence
• Experience in development and execution of incident response plans, ensuring proper communication and documentation throughout the incident lifecycle.
• Ability to collaborate with cross-functional teams to coordinate incident response activities and ensure timely communication.
• Experience as the primary point of contact for incident escalations from Tier 1/2 analysts, with the ability to perform advanced triage, including deep-dive analysis of security events and logs to determine incident severity, scope, and potential impact.
• Strong background in formulation and execution of threat hunt scenarios and the development of subsequent use cases to uplift detection capability
• Ability to investigate potential threats identified through security alerts via SIEM, anomalies, or intelligence reports.
• Experience conducting independent research and analysis to identify potential attack vectors and vulnerabilities. This may include using threat intelligence and attack frameworks to create realistic threat scenarios.
• Capability to translate threat intelligence into actionable detection and hunting strategies.
• Experience in developing and fine-tune security rules and correlation logic to improve threat detection capabilities.
• Relevant industry certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), or CompTIA Security+ are highly desirable.

Our roles can be adjusted to work flexibly with the potential of reduced hours to balance your time between the home and office. Please speak with us about potential options.

What we can offer you

• Explore how a career at EY is yours to build at www.ey.com/au/careerdevelopment
• Discover how, when and where you can work at www.ey.com/au/flexibility
• Learn about our commitment to DE&I at www.ey.com/en_au/careers/diversity-equity-inclusiveness
• Discover the various ways our benefits can cater to your needs, across wellness, financial wellbeing, and family-friendly policies which include 26 weeks gender neutral paid parental leave at www.ey.com/au/benefits
• We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation at www.ey.com/en_au/careers/indigenous

Apply now… we’re over 9,000 perspectives in Australia and we’re ready to welcome yours.

Diversity, equity, and inclusiveness (DE&I) are core to who we are, how we work and how we live our values. We hold a collective commitment to continue to drive an environment where all differences are valued, practices are equitable, and everyone experiences a sense of belonging— where people are inspired to team and lead inclusively in their interactions every day. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at contactrecruitment@au.ey.com or +61 3 8650 7788 (option 2). Anything you tell us will be kept completely confidential.

The exceptional EY experience. It’s yours to build.

EY | Building a better working world 

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

#LI-Hybrid