The Cyber Threat Detection - Active Defense Analyst role at EY focuses on enhancing the firm's enterprise security through proactive measures. The Active Defense team is responsible for network reconnaissance, penetration testing, anomaly analysis, and more. The analyst will emulate attacker behaviors and identify security vulnerabilities using various tools. This position requires collaboration with technical and non-technical teams to report findings and remediate vulnerabilities.

• 6+ years of relevant experience in threat intelligence, intrusion analysis, incident response, or similar roles.
• Demonstrated understanding of the threat intelligence life cycle and network threats.
• Knowledge of security incident response processes and procedures.
• Good understanding of both Windows and Unix/Linux operating systems.
• Familiarity with EDR, SIEM, and scripting.

• Perform research and analysis of attacker techniques and emulate those attacks in a controlled environment.
• Identify security breaches through hunting operations within a SIEM and other tools.
• Analyze artifacts collected during security tests or passive investigations.
• Communicate with server owners and IT contacts to pursue security testing activities.
• Create presentations that support findings and maintain security testing process documentation.

• Ernst & Young (EY) offers a comprehensive and competitive benefits package designed to support the well-being of its employees across various dimensions.