EYGDS Cyber-Frontier AI Layered Defense Detection And Response-Manager
About this role
Key Responsibilities
Client Engagement & Transformation Leadership
- Lead SOC transformation programs with a focus on Agentic AI adoption
- Define target operating models for AI-enabled SOCs (people, process, technology)
- Conduct maturity assessments and develop transformation roadmaps
- Engage with client leadership (CISOs, SOC heads) to align on strategy, value, and outcomes
Solution Architecture & Delivery
- Architect agentic AI-driven SOC solutions integrating SIEM, SOAR, XDR, and AI platforms
- Design and oversee implementation of AI agents for SOC use cases, such as:
- Alert triage and prioritization
- Investigation copilots and enrichment
- Incident summarization and reporting
- Automated response orchestration
- Ensure integration of LLMs, RAG pipelines, and contextual data sources into SOC workflows
- Guide teams on platform deployment, migration, and optimization initiatives
AI-Driven SOC Innovation
- Identify and implement high-impact AI use cases to improve SOC efficiency and detection quality
- Drive adoption of agentic workflows and multi-agent orchestration patterns
- Establish best practices for prompt engineering, context management, and AI governance
- Balance AI automation with analyst decision-making for effective outcomes
Team Leadership & Delivery Management
- Lead cross-functional teams of SOC engineers, detection engineers, and AI specialists
- Provide technical guidance and mentorship on AI-integrated SOC workflows
- Ensure high-quality delivery across projects, including timelines, documentation, and outcomes
- Support capability building and internal knowledge development in Agentic AI security
Stakeholder Communication & Thought Leadership
- Lead client workshops, demos, and executive presentations
- Translate technical concepts into business outcomes and ROI-driven narratives
- Contribute to thought leadership, solution accelerators, and reusable frameworks
Required Skills & Experience
- 8–12 years in Cybersecurity / SOC Engineering / Detection & Response, with leadership experience
- Strong expertise in SIEM, SOAR, and XDR platforms (e.g., Microsoft Sentinel/Defender, CrowdStrike, Splunk)
- Proven experience in SOC transformations, platform implementations, or large-scale deployments
- Hands-on or applied understanding of AI/LLM use cases in cybersecurity
- Experience integrating automation, APIs, and orchestration workflows in SOC environments
- Strong understanding of threat detection, incident response, and MITRE ATT&CK framework
- Ability to manage client stakeholders and drive strategic conversations
Preferred / Good-to-Have
- Experience with agentic AI frameworks (e.g., LangChain, Semantic Kernel, AutoGen, etc.)
- Exposure to Azure OpenAI, AI platforms, or cloud-native AI services
- Understanding of RAG architectures, embeddings, and semantic search
- Experience designing AI copilots or automation solutions for SOC operations
- Exposure to DevSecOps, cloud security, or modern security architectures
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.