<div style="font-family:Arial;font-size:1.0em"> At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. </div> <div style="font-family:Arial;font-size:1.0em"> </div>NGSIEM JD details for Manager Manager Role Summary The NG SIEM Manager owns the enterprise-wide SIEM–SOAR strategy, including ingestion architecture, detection governance, correlation frameworks (Fusion), and case management standards. This leadership role drives automation maturity, data quality, and operational excellence across Security Engineering. Key Responsibilities <ul> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Define overall NG SIEM and SOAR strategy, roadmap, and architecture.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Govern onboarding, ingestion structures, and quality standards using Cribl, cloud-native pipelines, and routing rules.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Establish Fusion correlation strategy—priority rule sets, enrichment patterns, MITRE coverage, noise control.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Lead the enterprise Case Management program (workflow, SLA, severity model, automation).</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Own SOAR strategy—automation roadmap, playbook standards, orchestration framework, KPIs.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Partner with IR, Threat Hunting, CTI, Cloud Security, and Network teams to design multi-layer detection logic.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Review and approve critical detection content, correlation logic, and data models.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Oversee ingestion performance, retention, licensing, and cost optimization.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Manage a team of Staff, Senior Engineers, and Automation Engineers.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Present metrics and maturity dashboards to leadership: <ul> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">ingestion health</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">correlation performance</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">case SLA adherence</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">automation success rate</li> </ul> </li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Drive continuous improvement, runbooks, SOPs, and audit readiness.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience or exposure to AI‑powered SOC features such as Charlotte AI, Sentinel Copilot.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ability to leverage AI assistants for query generation (SPL/KQL/CQL), alert summarization, detection tuning, and workflow optimization.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Familiarity with exploring AI capabilities in SOAR platforms (Fusion, Sentinel, Splunk SOAR) to automate enrichment, case resolution, and noise reduction.</li> </ul> Skills & Experience <ul> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">7+ years in SIEM/SOAR, detection engineering, or security analytics.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Expertise in Fusion-like correlation engines, case management frameworks, and SOAR automation.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Strong background in security architecture, data modeling, and cross-platform integrations.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Experience managing teams and multi-stakeholder programs.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Deep hands-on knowledge of Cribl, cloud-native pipelines, Falcon NGSIEM, Sentinel, ADX, Splunk, LogScale.</li> <li style="line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Strong communication and executive presentation skills.</li> </ul><div style="font-family:Arial;font-size:1.0em"> EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. </div>

TC-CS-CDR-NG SIEM-Manager (Hyderabad, TG, IN, 500081) @ EY Global Services

About this role

Ready to apply?