H1BConnect Pro: Unlock advanced filters, H1B sponsorship insights, and unlimited job access.Subscribe now
EY logo

Cyber Threat Detection - Active Defense Analyst

EY
Atlanta, GA Full-time 3/24/2026
Undergraduate with 5+ Years of Experience
Approval 97.9%Total filings 747New hires 303
💎 Strong Sponsor
FY 2025

Job Description

The Active Defense Analyst role at EY involves enhancing the firm's enterprise security through proactive penetration testing, threat hunting, and anomaly analysis. Candidates will emulate attacker behaviors, identify vulnerabilities, and collaborate with teams to remediate security issues.

Requirements

  • 6+ years of relevant experience in threat intelligence, intrusion analysis, incident response, malware analysis, or similar roles.
  • Demonstrated understanding of the threat intelligence life cycle, network threats, and attack vectors.
  • Knowledgeable in security incident response processes and performing security audits.
  • Good understanding of both Windows and Unix/Linux operating systems.
  • Understanding of IP networking concepts.
  • Global mind-set for working with different cultures.
  • Demonstrated integrity and judgment in a professional environment.
  • Ability to balance work/personal priorities.
  • Good social, communication, and writing skills.
  • Associates Degree and/or certifications like GPEN, CISSP, Security+, GCIH, OSCP.

Responsibilities

  • Perform research and analysis of attacker techniques and emulate those attacks.
  • Identify security breaches through hunting operations within a SIEM and other tools.
  • Identify patterns consistent with sophisticated attacker methodologies.
  • Analyze artifacts collected during security tests or investigations.
  • Communicate with server owners and IT contacts for security testing activities.
  • Create presentations in MS Word, PowerPoint, and/or Excel to support findings.
  • Maintain and improve security testing process and protocol documentation.
  • Assist in analyzing findings and develop fact-based reports.
  • Identify means to disrupt attacker actions and enhance defender response capabilities.

Benefits

  • Ernst & Young (EY) offers a comprehensive and competitive benefits package designed to support the well-being of its employees across various dimensions.

Is this job posting expired or no longer available?