Security Operations Centre Consultant

About the role

Join EY’s Security Operations Centre as a Consultant and work with a valued team of technologists across Australia. You will help monitor, detect and respond to cyber threats while supporting clients and internal stakeholders.

Key responsibilities

• Monitor and respond to security alarms, alerts and incidents using SIEM, EDR and NDR tools.
• Escalate true‑positive detections to senior analysts, SOC engineering or clients.
• Manage client tickets and follow ITIL practices for service request, incident, problem and change management.
• Deliver services in line with SLA targets and quality standards.
• Contribute to continuous improvement initiatives for the SOC.
• Communicate effectively with customers, teammates and management.

Required profile

• Experience in information security, preferably in a security operations or incident response role.
• Strong working knowledge of at least three security tools such as firewalls, IDS/IPS, antivirus, anti‑spam, DLP, forensics or vulnerability management solutions.
• Familiarity with general cyber‑security concepts and methods.
• Hands‑on experience with Windows, Linux and UNIX operating systems.
• Willingness to learn and adapt in a fast‑changing environment.

Required skills

• SIEM, EDR and NDR platforms.
• Splunk, Microsoft Sentinel, CrowdStrike, Microsoft Defender and ServiceNow.
• Firewalls, IDS/IPS, antivirus and anti‑spam solutions.
• Data loss prevention, forensics software, vulnerability management and website security tools.
• ITIL knowledge and incident management processes.

What we offer

• Career development programmes and access to global EY resources.
• Flexible work arrangements to balance professional and personal life.
• Inclusive and diverse culture recognised as a top employer for women.
• Opportunities to work across EY offices throughout Australia.