Tech Consulting - Cybersecurity - Threat & Vulnerability Managment (Cyber Threat Intel) - Manager

Consulting – Tech Consulting – Cybersecurity – Threat and Vulnerability Management (Cyber Threat Intelligence) - Manager

The opportunity

In a rapidly changing cybersecurity threat landscape, clients from all industries look to us for trusted solutions for increasingly complex threats and risks. Join our dynamic Cybersecurity team as a Manager in Response & Investigations, where you'll confront emergent threats, conduct detailed investigations, and develop strategies to enhance security measures. This role is pivotal in safeguarding our organization's digital infrastructure and requires a proactive approach to continuous improvement and the application of best practices.

Your key responsibilities

As a Manager on the Cyber Threat Intelligence team, your key responsibilities would include integrating an intelligence-led perspective across all domains of security. You role would involve leading cross-disciplinary teams in conducting detailed intelligence analysis using industry frameworks and techniques and applying that analysis to inform and enhance other areas of cybersecurity. You would oversee teams’ collection, analysis, production, and dissemination of actionable cyber threat intelligence and ensure collaboration with other security and business teams is productive and valuable. You will be responsible for ensuring delivery of clear, concise, and actionable intelligence reports and support to both technical and executive audiences. Furthermore, as a manager, you would play a pivotal role in mentoring senior and junior analysts, setting and advancing a collaborative and trust-based culture, and bringing new ideas to enhance the team’s skillsets and capabilities. In addition to these responsibilities, you would be expected to stay abreast of the latest cyber threat trends and technologies, representing EY and the team in high-visibility industry groups, conferences, and events.

Skills and attributes for success

• The ability to communicate effectively and professionally both verbally and in written form when interacting with clients, senior leaders, technical teams, support staff, vendors, and business partners in both technical and non-technical terms.
• The ability to engage with clients by listening to and understanding their needs.
• The ability to recognize when to escalate risks, issues, and opportunities to enhance service delivery and increase revenue to appropriate client and EY leadership.
• The ability to manage the creation, review, and delivery of high-quality work products, client reports, and presentations.
• Adherence to service quality standards and program management requirements.
• The ability to work collaboratively in a cross-functional team environment that is culturally diverse and with geographically dispersed teams.
• Strong analytical and critical thinking skills, with the ability to process complex information and present it in a clear and understandable manner.
• A proactive mindset, with a keen interest in staying abreast of the latest cyber threats and trends.

To qualify for the role, you must have:

• A Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, or a related field along with 6+ years of relevant experience in cyber threat intelligence or a related field, with some of that experience in professional services or similar fields.
• Demonstrated leadership experience with the ability to manage and mentor a team of consultants and analysts.
• Demonstrated experience with common standards such as STIX/TAXII, ICD203 & ICD206, DHS TLP, etc. and a thorough understanding of the intelligence lifecycle.
• The ability to conduct research and Open-Source Intelligence (OSINT) while understanding the importance of leveraging primary sources and validating findings.
• A strong understanding of Threat Intelligence Platforms (TIPs) and experience leading research and analysis using common CTI tools, whether open or closed source.
• Deep understanding of frameworks and concepts such as atomic Indicators of Compromise (IOCs), MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), the Pyramid of Pain, and higher-level behavioral patterns.
• Experience dealing with threat actor of varying motivations, resourcing, and goals, including Advanced Persistent Threat (APT) actors, cybercriminals, and hacktivist groups.

Ideally, you’ll also have

• The ability to communicate effectively in verbal conversations, workshops, and interviews.
• Exemplary writing skills and the ability to communicate complex technical information to a non-technical audience through written deliverables.
• The ability to translate abstract, high-level thoughts into easily digestible concepts and visuals, including PowerPoint slides and Visio diagrams.
• The ability to quickly break down complex problems into step-by-step, solvable components, estimate level-of-effort and needs for each component, and prioritize activities to achieve outcomes in tight timelines.
• Familiarity with the latest events, threat actors, vulnerabilities, security trends, and mitigations in cybersecurity.

What we look for

We are looking for top performers with a deep understanding of technological threats and the capacity to lead teams in a dynamic, client-driven environment. Ideal candidates are adept at managing current challenges and anticipating future vulnerabilities within the cyber realm

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.