{"id":1776695,"url":"https://alion.io/job/ernst-young-senior-consultant-siem-engineer-cybersecurity","title":"Senior Consultant - SIEM Engineer - Cybersecurity","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Auckland, New Zealand"],"countries":["NZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":67000,"max_usd":154000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-02T02:00:00Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-11-01T14:43:57Z","board_verified":true,"closed_at":null,"days_open":30,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":30},"description":"At EY, we’re all in to shape your future with confidence.\nWe’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.\nJoin EY and help to build a better working world.\nNāu te rourou, nāku te rourou, ka ora ai te iwi\nWith your contribution and my contribution, together we will thrive.\nHei Oranga Iwi | The opportunity\nThis role is based in our Tāmaki Makaurau (Auckland) office, you’ll work with a values-based team of amazing technologists who are always growing, learning, and adapting, both in and out of the office.\nKo Tō Rourou | Your key responsibilities\nTechnical Lead for threat detection and response onboarding projects\nDesign, build, support, and optimise SIEM and EDR platforms used in threat detection and response services\nMonitor and respond to security alarmsalertsincidents in SIEM and EDR platforms\nEscalate security alarmsalertsincidents to clients as defined per engagement\nMonitor and manage tickets in accordance with processes defined in the security operations manual and SLA’s\nSupport junior team members in delivering SOC services to client\nParticipate in client facing meetings\nDeliver services to contract terms and SLA’s\nFollow Information Technology Infrastructure Library (ITIL) practices regarding service request, incident, problem and change management\nContribute to security operations continuous improvement program\nCommunicate effectively with customers, teammates, and management. \nNgā Pūkenga | Skills and attributes for success\nWe’re interested in your strengths, what you want to learn, and how far you want to go.\nProven experience within information security, specifically in a security operations and vulnerability discovery or information operations/incident role.\nStrong working knowledge of at least three of the following security tools: SIEM, EDR, host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website security\nExperience with utilising security SIEM tooling is a must. It is most beneficial to have experience with Splunk, Crowdstrike NextGen SIEM & Falcon, MS Defender/Sentinel, Tenable, Qualys, and ServiceNow.\nKnowledge of general security concepts and methods \nIt's great, but not essential, if you have:\nExperience with Windows, Linux, UNIX, any other major operating systems\nAbility to mesh sound technical and security practices to problem solving\nDemonstrate in-depth technical capabilities and professional knowledge\nAdditional certifications and training preferred in the following areas: Network Security certifications (CISSP, Security+, SANS, ISACA, Vendor Certificates), Project Management training/certification, and Quality Management (ITIL, Six Sigma, TQM, etc.) training/certification\nKo Taku Rourou | What we offer you\nAt EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.\nCareer development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences www.ey.com/nz/careerdevelopment \nFlexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy. \nA comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/nz/benefits\nInclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at  or +64 9 300 7044 (option 2). Anything you tell us will be kept completely confidential.\nHe rourou kai kei ō ringa hei tākoha? Tēnā haria mai!\nAre you ready to shape your future with confidence? Apply today\n#LI-Hybrid\nEY | Building a better working world \nOur preferred applicant will be required to undertake employment screening by EY or our external third-party provider.\n© 2026 Ernst & Young, New Zealand. A member firm of Ernst & Young Global Limited. All Rights Reserved.","description_format":"text","description_chars":4790,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave"],"hiring_locations":[{"name":"New Zealand","iso":"NZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Operations","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-03T16:40:04Z"}],"visa":[],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.844,"p_room":0.55,"age_days":30,"expected_fill_days":27,"reasons":["conf:5","velocity","win:tail","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-senior-consultant-siem-engineer-cybersecurity","json_url":"https://alion.io/job/ernst-young-senior-consultant-siem-engineer-cybersecurity.json","meta":{"generated_at":"2026-11-01T14:59:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22944,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-senior-consultant-siem-engineer-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-senior-consultant-siem-engineer-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-senior-consultant-siem-engineer-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-senior-consultant-siem-engineer-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-senior-consultant-siem-engineer-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1776695}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1776695},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}