L1 Security Analyst – Cybersecurity Operations

About the role

Join EY's Cybersecurity Operations Centre as a Level‑1 Security Analyst. You will be the first line of defence, monitoring alerts, performing initial triage, and escalating incidents to protect the confidentiality, integrity, and availability of client and internal systems.

Key responsibilities

• Monitor security alerts from analytics and AI‑driven threat detection platforms.
• Investigate and triage incidents, validate false positives, and identify genuine threats.
• Escalate incidents to L2/L3 analysts or relevant teams following response procedures.
• Document findings, maintain incident tickets, and update case tracking systems.
• Support reporting of incidents, vulnerabilities, and emerging threat trends.
• Contribute to SOP improvements and create knowledge‑base articles and playbooks.
• Perform basic troubleshooting of threat‑detection tools.

Required profile

• Bachelor’s degree in Computer Science, IT, or a related STEM field.
• 0‑2 years of relevant experience or strong academic background.
• Professional certifications such as CompTIA Security+, CySA+, Microsoft SC‑200, or CEH are a plus.
• Ability to work in a 24/7 shift environment.

Required skills

• Security analytics platforms and AI‑driven threat detection.
• SIEM tools.
• Firewalls and intrusion detection/prevention systems.
• Basic networking concepts.
• Malware analysis and threat‑triage techniques.

What we offer

• Opportunity to develop within a global consulting firm.
• Access to cutting‑edge cybersecurity technologies.
• Inclusive culture and continuous learning programs.