Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Engaged Employer

Ernst & Young

Compare

3.4

based on 10.9k Reviews

Video summary

168 Ernst & Young Senio Jobs

GMS-Senior-Threat Responder SecOps

Ernst Young

3.4

based on 10.9k Reviews

4-8 years

Bangalore / Bengaluru

1 vacancy

GMS-Senior-Threat Responder SecOps

Ernst & Young

posted 3d ago

Job Role Insights

Flexible timing

Key skills for the job

Customer Service Quality Assurance Consulting SQL CMS Troubleshooting

+ 4 more

Job Description

CMS-TDR Senior

As part of our EY-cyber security team, who shall work as Senior analyst who will assist clients in detecting and responding to security incidents with support of their SIEM, EDR and NSM solutions.

We re looking for Security Analyst with expertise in SIEM, EDR and NSM solutions.

Your key responsibilities

Operational support using SIEM solutions (Splunk, Sentinel, CrowdStrike Falcon LogScale), EDR (CrowdStrike, Defender, Carbon Black) and NSM (Fidelis, ExtraHop) for multiple customers.
Specialized in second level incident validation and more detailed investigation
Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery
SIEM support activities which includes adhoc reporting and basic troubleshooting
Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer

Skills and attributes for success

Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
Good knowledge of SIEM technologies such as Splunk, Azure Sentinel, CrowdStrike Falcon LogScale from a Security analyst s point of view
Troubleshoot issues associated with SIEM solution.
Ability to work with minimal levels of supervision or oversight.
Exposure to IOT/OT monitoring (Claroty, Nozomi Networks etc.) is a plus
Good knowledge and experience in Security Monitoring
Good knowledge and experience in Cyber Incident Response
Knowledge in ELK Stack
Knowledge in Network monitoring technology platforms such as Fidelis XPS, ExtraHop
Knowledge in endpoint protection tools, techniques, and platforms such as Carbon Black, Tanium, CrowdStrike, Defender etc