Cybersecurity Engineer (XDR/ITDR/NDR), Technology ...

About this role

Cybersecurity Engineer (XDR/ITDR/NDR), Technology Consulting (Associate/Senior) Job Details | EY Cookie information Welcome to the EY careers job search site. This website is based on the SuccessFactors software provided by SAP. On this page, functional and optional cookies are used to improve your experience and design our careers site more user-friendly and in line with your needs. In this context, cookies from providers in third countries may also be used and data may be transmitted to providers such as social media services outside the EU. For this we require your consent. By clicking "Accept All Cookies", you agree to these. This also includes your consent to the transmission of certain personal data to third countries, including the USA, in accordance with Art. 49 (1) (a) GDPR. You can select your settings by clicking “Modify Cookie Preferences” to confirm your choices from the optional cookie tracking and selecting the required cookies required to remain on the site. You can change your selection at any time by clicking the link at the bottom of the page. Modify Cookie Preferences Reject All Cookies Accept All Cookies Skip to main content Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it’s like to work here How to join us Job search Experienced professionals Early careers Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it’s like to work here How to join us Job search Experienced professionals Early careers Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it’s like to work here How to join us Job search Experienced professionals Early careers Search by keyword and/or location Show More Options Loading... Business Area All Country/Region All City All   Clear Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Apply now » Apply now Start applying with LinkedIn Apply Now Start Please wait... Cybersecurity Engineer (XDR/ITDR/NDR), Technology Consulting (Associate/Senior) Location:  Other locations:  Primary Location Only Salary: Competitive Date:  26 Aug 2026 Job description Requisition ID:  551344 MSS Resident Engineer, Cybersecurity, Technology Consulting  At EY, we develop you with future-focused skills and equip you with world-class experiences. We empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. We work together across our full spectrum of services and skills powered by technology and AI, so that business, people and the planet can thrive together.  We’re all in, are you? Join EY and shape your future with confidence.   Background EY delivers comprehensive Managed Security Services (MSS) to clients, ensuring robust cyber defence through continuous monitoring and incident response. Operating 24x7x365, our services encompass threat detection, triage, investigation, escalation and response across a suite of advanced security technologies including SIEM, Extended Detection and Response (XDR), Antivirus (AV), Mobile Threat Detection and Email Threat Detection. The role expected is as a Resident Engineer, which requires you to oversee the day-to-day management and maintenance of the client’s managed security platforms. Your primary responsibility will be to ensure the optimal performance, stability, and reliability of the security technologies in use, while providing timely resolution of technical issues. In this hands-on role, you will liaise directly with client stakeholders and third-party vendors to coordinate operational activities, enforce policy governance, and support continuous improvement of the security environment. This position requires strong technical expertise, excellent communication skills, and a proactive approach to problem-solving in a dynamic and fast-paced environment.   Key Responsibilities: •    Manage and maintain the client’s XDR platforms to ensure optimal performance, stability, and availability. •    Monitor system health and proactively identify and resolve technical issues to minimise downtime and service disruption. •    Collaborate with client stakeholders to provide hands-on technical support and ensure alignment with operational and security policies. •    Coordinate with third-party vendors to facilitate troubleshooting, upgrades, and issue resolution across integrated security technologies. •    Assist in the fine-tuning of detection rules, policy updates, and configuration changes to enhance threat detection capabilities. •    Support the automation of daily operation tasks through SOAR playbooks and scripting.  •    Participate in regular service reviews and contribute to reporting activities, including SLA metrics, alert trends, and containment timelines. •    Maintain documentation of system configurations, operational procedures, and incident response actions. •    Provide input into continuous improvement initiatives to strengthen the client’s security posture and operational efficiency. •    Review and analyse telemetry data to identify trends, anomalies, and areas for improvement. •    Collaborate with the team to implement enhancements based on telemetry insights. •    Stay updated on industry best practices and emerging threats to enhance operational effectiveness. •    Work closely with other security teams to ensure a cohesive approach to threat detection and response. •    Participate in incident response activities as needed.   Skills and attributes for success  •    Communication Skills: Excellent verbal and written communication skills to effectively liaise with stakeholders and team members. •    Problem-Solving Ability: Proficient in assessing situations quickly and developing effective solutions under pressure. •    Technical Proficiency: Proficient in scripting and query languages such as python, KQL, YARA.  •    Team Player: Collaborative mindset with the ability to work effectively within a team environment. •    Adaptability: Comfortable working in a fast-paced, dynamic environment and able to adjust to changing priorities. •    Continuous Learner: Eagerness to stay updated on the latest security trends, threats, and technologies. •    Leadership Qualities: Ability to guide and mentor junior team members in best practices for alert triaging and incident response. •    Resilience: Capable of maintaining composure and focus during high-stress situations and incidents.   To qualify for the role, you must have •    A recognised university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent, together with at least three years of relevant experience. •    Hands-on experience in Sentinel, Microsoft Defender or any SIEM and EDR platforms. •    Strong interest in the field of information security. •    Creative, independent with good problem-solving skills. •    Excellent communicator with strong analytical, interpersonal and writing skills.   What we look for Highly motivated individuals with excellent problem-solving skills and the ability to prioritise shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organisation.   What working at EY offers EY offers a competitive remuneration package where you’ll be rewarded for your individual and team performance. We are committed to being an inclusive employer and are happy to consider flexible working arrangements. Plus, we offer:   •    Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. •    Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way. •    Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs. •    Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.   Company description  EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. 1 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fuelled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. All in to shape the future with confidence. Apply now » Apply now Start applying with LinkedIn Apply Now Start Please wait... Find similar jobs: Consulting DE, Consulting CN, Consulting CA, Consulting BR, Consulting Connect with us Our locations My EY Site map Legal and privacy Cookie Consent Manager Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. × Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data centre "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Show More Details Advertising Cookies Provider Description Enabled AddThis Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provider AddThis LinkedIn LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn. Cookie Policy Cookie Table Privacy Policy Terms and Conditions Consent to cookies from provider LinkedIn Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provider GoogleAnalytics Google Tag Manager Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing and more. Privacy Policy Terms and Conditions Consent to cookies from provider GoogleTagManager Confirm My Choices Reject All Cookies Accept All Cookies

Skills

• Python
• Sap
• Security