{"id":1289041,"url":"https://alion.io/job/ernst-young-cyber-detection-response-engineer-cross-platform-management-senior","title":"Cyber Detection & Response Engineer, Cross-Platform Management, Senior","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Taguig, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":47000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Carbon Black","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Cyber Kill Chain","optional":true},{"name":"GDPR","optional":true},{"name":"IBM QRadar","optional":true},{"name":"ISO 27001","optional":true},{"name":"Linux","optional":true},{"name":"LogRhythm","optional":true},{"name":"Metasploit","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Nessus","optional":true},{"name":"Nmap","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true},{"name":"SOC 2","optional":true},{"name":"Sophos","optional":true},{"name":"Splunk","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-26T02:00:00Z","employer_posted_date":"2026-09-26","last_verified_at":"2026-11-02T20:49:19Z","board_verified":true,"closed_at":null,"days_open":37,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":37},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nThe opportunity\nIn your role at EY, you’ll be inspired by a team of the brightest business and technical minds in cyber security. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.\nYour key responsibilities\nWe are seeking a highly skilled and experienced Cybersecurity Engineer, Cross-Platform Management to join our team. The ideal candidate will have a strong background in designing, building, and migrating Security Orchestration, Automation & Response (SOAR), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Next-Generation Antivirus (NGAV), Cloud Security and Network Security Solutions. The Cybersecurity Engineer’s responsibilities include but not limited to ensuring the security and integrity of our company's data and infrastructure.\nResponsibilities for success include, but not limited to:\nPlanning, design, build, implementing, managing and upgrading security systems to protect data, systems and network\nEnsuring that the client data and infrastructure are protected by continuously reviewing, enabling and implementing appropriate security controls & enterprise infrastructure. Identifying use cases on existing security systems and provide recommendations to improve current state\nConduct regular capacity planning assessments on security appliances and licenses, provide quarterly recommendations to the relevant stakeholders. Determine the hardware and software asset’s lifecycle, plan ahead the recommendation on hardware refresh before it reaches its EOL/EOS state\nProcess security project communications and track with various technical teams until it reaches completion, document project steps & lessons learned and work with other technical teams on integration, deployment & enhancement projects and any other engineering tasks\nDevelop and design security project plans for SIEM, NDR, XDR, NGAV, NGFW, MDM, DLP, SWG, UEBA, primarily on cloud, DevOps and application security based on zero trust framework in compliance with applicable regulatory and data privacy requirements\nContribute to the development of the various TechOps strategies and roadmaps as required to enable realization of the business strategies and objectives\nPreferred Qualifications:\nIdeal candidate must have a minimum of 6+ years of cybersecurity design, build and implementation experiences in a complex or large-scale environment or at least a minimum of two combined qualifications and/or experiences below:\nAt least 3 years of hands-on experience in implementing, deploying & managing SIEM tools such as Splunk, Microsoft Sentinel, Qradar, Mcafee, Arcsight, LogRhythm, including python scripting, usage of regular expressions and natural language queries or;\nExtensive knowledge and hands-on experience in the areas of endpoint security (wintel & linux), web security, network (IDS, IPS, FW) security, data loss prevention (DLP) deployment or;\nExperience with Security Assessment tools (NMAP, Nessus, Metasploit, Netcat), vulnerability analysis, penetration testing, remediation and compliance, usage of automation tools for patch and vulnerability management or;\nHands-on design and build experience for EDR, XDR and NGAV solutions such as Crowdstrike, Microsoft Defender, Cortex XSIAM, Carbon Black, Sophos, etc. or;\nUnderstanding of security principles, techniques, and technologies such as SANS Critical Security Controls, OWASP Top 10, Mitre Attack, Cyber Kill Chain, PCI-DSS, ISO 27001/02, SOC2, GDPR and other regulatory compliance frameworks, or;\nCombined hands-on experience on DevSecOps, Windows & Linux Server Administration, Network Administration, Storage & Backup, Systems Administration, Middleware, Application Administration and Endpoint Security Engineering. Network security zone administration, configurations, IDS/IPS policies, systems communications from Layer 1 to 7, packet capture and analysis log formats & analysis, ability to aggregate and parse log data for syslog, http logs, DB logs for discovery & investigation purposes or;\nSetting up SOAR for custom real-time dashboards, process automations, report generation, security orchestration, incident response automation using Phantom & Demisto, workflow modelling, playbooks development, Phantom API integrations with cloud platforms, and SOAR development, migration and administration.\nStrong domain expertise, implementation and/or integration skills in data classification, data discovery, information rights management, encryption, tokenization, data access governance and data masking technology solutions.\nGeneral Qualifications:\nBachelor’s Degree relevant to Information Technology or Computer Science\nCan work under pressure, displays high level of ownership & accountability with very minimal supervision to execute tasks and deliverables\nRelated Certification such as CEH, CHFI, Sec+, ITILv3, GCFA, ECIH, GCIH, CySA+, and other cybersecurity engineering-related certifications\nWhat working at EY offers\nAt EY, we’re dedicated to helping our clients, from start-ups to Fortune 500 companies - and the work we do with them is as varied as they are.\nYou get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:\nSupport, coaching and feedback from some of the most engaging colleagues around\nOpportunities to develop new skills and progress your career\nThe freedom and flexibility to handle your role in a way that’s right for you\nAbout EY\nAs a global leader in Assurance, Tax, Strategy & transactions and Consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creativefreedom to make things better. Whenever you join, however long you stay, the exceptionalEY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.\nIf you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.\nJoin us in building a better working world.Apply now\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":7850,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-09-26T07:17:41Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.797,"p_room":0.55,"age_days":37,"expected_fill_days":27,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-cyber-detection-response-engineer-cross-platform-management-senior","json_url":"https://alion.io/job/ernst-young-cyber-detection-response-engineer-cross-platform-management-senior.json","meta":{"generated_at":"2026-11-03T01:40:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2253,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-cyber-detection-response-engineer-cross-platform-management-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-cyber-detection-response-engineer-cross-platform-management-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-cyber-detection-response-engineer-cross-platform-management-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-cyber-detection-response-engineer-cross-platform-management-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-cyber-detection-response-engineer-cross-platform-management-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1289041}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1289041},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}