Cyber as a Service - Threat Exposure Management - Product Lead

Job description

-

 

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime.

We will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

Job Summary:
 
Cyber threats continue to evolve and pose serious risks within the business environment. EY’s Threat Exposure Management (TEM) services, part of EY’s Cybersecurity as a Service (CaaS), provides capabilities to address the ongoing operational requirements encompassing vulnerability and configuration management.

Clients retain TEM to proactively defend their environment and address weakness in the environment to prevent exploits by cyber threats. As a CaaS security professional you will belong to a globally connected team of security professional delivering services from our Dallas Cyber Center.

 
What this means for you
 
At EY, webelieve your career is a journey and we are committed to providing you an array of exciting opportunities to help you find the career path that is right for you. In this role, you will have the opportunity to team with a wide variety of clients to deliver professional services and to actively participate in a rapidly growing practice. With each engagement, you can expect to build leadership, communication and client-management skills, as well as sharpen your problem-solving capabilities.EY Security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills.If you are interested in “building a more secure and trusted working world,” being part of a dynamic team, serving clients and reaching your full potential, EY Advisory Services is for you. Apply today!

Key Responsibilities:
·  Responsible for the technology delivery to support TEM service offerings, including infrastructure and application vulnerability scanning (e.g. Qualys, Rapid7, Acunetix), correlating analytics and reporting (e.g. Splunk, Tableau), and workflow and orchestration (e.g. ServiceNow) solutions
·  Responsible for staying abreast of industry leading vulnerability and software security vendors  and informing their product roadmaps
·  Ensures that product technology is available at the agreed upon service levels to support the delivery of TEM service
·  Product lifecycle management from concept to phasing out of the product(s)
·  Detailed knowledge of vulnerability management, configuration management, software security, security tools and trends
·  High-level technical understanding of managed security services and appropriate delivery methods
·  Analyzes, identifies and quantifies opportunities for new product features and new product ideas
·  Preparation, presentation and implementation of businesses cases and business plans for new markets, new product features and new product ideas
·  Understand own/new product markets extremely well, including identification of potential technologies, best practices, competitors and partners, merger and acquisitions, and strategies
·  Makes decisions, and champion’s enhancements or new products for the product line supporting the overall business strategy
·  Working knowledge/experience of network systems, security principles, and applications
·  Fundamental understanding of defense-in-depth and intelligence-driven strategies
·  Works effectively across functional teams
·  Develop the requisite expertise, knowledge, and ability to perform independently through mentorship; mentor and share expertise with junior staff
 
To qualify, candidates must have:
·  Bachelor Degree in Computer Science, Mathematics, Engineering, or other related area of study preferred with 3-5 years of overall IT professional experience.
·  At least 2+ years of work experience in Information Security
·  Ability to participate in after hours on-call rotation when required; Due to the nature of the business the Cyber analyst position covers all shifts 24/7
·  Strong working knowledge of at least three of the following security tools: host-based antivirus, anti-spam gateway solutions, firewalls, intrusion detection system/intrusion protection system, server and network device hardening, data loss prevention, forensics software, vulnerability management scanning, website security
·  Additional certifications and training preferred in the following areas:  Network Security certifications (CISSP, C|EH, Security+, SANS, ISACA, Vendor Certificates), Project Management training/certification,  and Quality Management (ITIL, Six Sigma, TQM, etc.) training/certification

EY, an equal employment opportunity employer (Females/Minorities/Protected Veterans/Disabled), values the diversity of our workforce and the knowledge of our people.