> Markdown version of [/jobs/ext/3907159-tc_cs_ngso-tdr_soc_senior](https://www.wearedevelopers.com/jobs/ext/3907159-tc_cs_ngso-tdr_soc_senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# TC_CS_NGSO TDR_SOC_Senior

- **Company:** Ernst & Young
- **Location:** UK
- **Experience:** Expert
- **Salary:** £47,823.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Perl (Programming Language), Network Monitoring, Regular Expressions, Security Information and Event Management, SQL Databases, Tanium Platform Expertise, Splunk, Elk Stack
- **Published:** October 25, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5295888519

## About the Role

* Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
 * Good knowledge of SIEM technologies such as Splunk, Azure Sentinel from a Security analyst's point of view
 * Troubleshoot issues associated with SIEM solution.
 * Ability to work with minimal levels of supervision or oversight.
 * Exposure to IOT/OT monitoring (Claroty, Nozomi Networks etc.) is a plus
 * Good knowledge and experience in Security Monitoring
 * Good knowledge and experience in Cyber Incident Response
 * Knowledge in ELK Stack
 * Knowledge in Network monitoring technology platforms such as Fidelis XPS, ExtraHop
 * Knowledge in endpoint protection tools, techniques, and platforms such as Carbon Black, Tanium, CrowdStrike, Defender etc

To qualify for the role, you must have

 * B. Tech./ B.E. with sound technical skills
 * Ability to work in 24x7 shifts
 * Strong command on verbal and written English language.
 * Demonstrate both technical acumen and critical thinking abilities.
 * Strong interpersonal and presentation skills.
 * Minimum 3 years of Hands-on experience in SIEM/EDR/NSM solutions
 * Certification in any of the SIEM platforms
 * Knowledge of RegEx, Perl scripting and SQL query language.
 * Certification - CCSA, CEH, CISSP, GCIH, GIAC.

Ideally, you'll also have

 * People/Project management skills.

## Description

As part of our EY-cyber security team, who shall work as Senior analyst who will assist clients in detecting and responding to security incidents with support of their SIEM, EDR and NSM solutions., * Operational support using SIEM solutions (Splunk, Sentinel), EDR (CrowdStrike, Defender, Carbon Black) and NSM (Fidelis, ExtraHop) for multiple customers.

 * Specialized in second level incident validation and more detailed investigation
 * Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery
 * SIEM support activities which includes adhoc reporting and basic troubleshooting
 * Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
 * Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer