Cybersecurity Manager – SOC, Incident Response & Threat Intelligence

About the role

EY is looking for an experienced Cybersecurity Manager to lead Security Operations, Incident Response and Threat Intelligence services for multiple client environments, including both IT and OT ecosystems. The role involves managing MSSP‑style SOCs, overseeing SIEM and SOAR platforms, and driving the growth of EY’s managed security services.

Key responsibilities

• Deploy, configure and administer SIEM platforms such as IBM QRadar, Splunk and ELK Stack across diverse client environments.
• Design and implement detection use cases, correlation rules, dashboards and reporting mechanisms.
• Lead investigations of security alerts, conduct forensic analysis and support incident response activities.
• Engineer and maintain SOAR solutions (Phantom, XSOAR, Resilient), creating automated response playbooks and integrations.
• Manage Threat Intelligence platforms (CTM360, CyberArk, BitSight, RecordedFuture) and produce intelligence reports.
• Oversee MSSP service delivery, ensuring SLA/KPI compliance and driving operational excellence.

Required profile

• 12+ years of experience in security operations, incident response, threat intelligence or cybersecurity consulting.
• B.Tech/M.Tech in Cybersecurity, Computer Science, Information Security or related field.
• Proven leadership in managing SOC teams and client engagements.
• Strong analytical and problem‑solving abilities with excellent stakeholder communication.

Required skills

• IBM QRadar, Splunk, ELK Stack
• IBM SOAR Resilient, Phantom, XSOAR
• CTM360, CyberArk, BitSight, RecordedFuture
• Python, PowerShell, SQL scripting
• SIEM administration, SOAR engineering, threat intelligence analysis