CTM - SOC Deploy Architect

Job description / Role

EY is seeking the region’s best Cybersecurity Security Operations Center (SOC) Architect who wants to join an elite team and have access to the latest global technologies. This position fulfils the most critical role of deploying the right SOC technologies in the right location and configuration to identify the most sophisticated of Cyber-attacks with the executive EY SOC Committee and brining a vision to life. The SOC Architect will work closely with specialized and dedicated SOC deployment teams and be part of a global network of architects to drive innovation. In addition, to working closely with the SOC deployment team (Project Manager and Engineers), the SOC Architect will also develop a close working relationship with the SOC OT and IoT specialists, Threat Intelligence teams, and be the technology champion for the SOC Manager.

The SOC Architect is a critical client facing role that requires the instinctive ability to recognize gaps in customer capabilities and to translate them into business requirements and an execution strategy in a clear and concise manner. The Architect will be responsible for the development of the overall vision that underlies the customer-centric EY SOC services, and plays a primary role in the design and implementation of that end-to-end services. Architect will also play a key role in introduction of new services /solutions in EY SOC portfolio in terms of evaluation, integration and deployment.

Key Responsibilities:

- Design EY SOC services to the client through the production of client specific CTM, LTM and PTM and updating of EY.
- SOC design documentation.
- Lead the technical team to deliver successful SOC services at client location.
- Liaise with the client data security team in finalizing the SOC services and take them through implementation.
- Work with delivery team to ensure successful integration of the project into operations.
- Key presenter to clients during executive SOC tours, along with other key EY executives and SOC management.
- Proposing and leading improvements of EY SOC services in line with dynamic regional and global cyber risk profiles and the global network.
- Raise and resolve any architectural issues/risks that could have implications against the cyber security strategy of clients.
- Key advisor to the SOC manager and EY SOC steering committee of any SOC innovation and technology adoption, through to integration.
- Provide governance during EY SOC services deployment and test phases at clients site to ensure compliance with and appropriateness of the security architecture.

Requirements

To qualify, candidates must have:

A real passion for Cybersecurity and a focused state of mind to understand how technology can assist and support to actively hunt and protect from the cyber threats we face today. We are looking for Cyber Security Operations Centre Professionals with capability and experience in some of the following areas:

- Excellent team work capabilities, passion and drive to succeed and combat Cyber threats
- SOC solutions design and deployment
- Experienced Cyber Security Architecture
- Deployment and configuring SIEM technologies and platforms such as Splunk, Arcsight, QRadar or others
- Threat Intelligence / feeds platform integration in SOCs
- Thorough knowledge of how the systems support Security Monitoring for the Analysts
- Awareness and knowledge of Cyber Incident Response
- Awareness and knowledge of Big data analytics, dashboards, eGRC and behavioral analysis tools.
- Awareness and knowledge of Cyber OT and IoT issues
- Awareness and knowledge on Attack & Penetration Testing / Ethical Hacking
- Awareness and knowledge on Application Security Risk Assessment

Qualifications & Experience:

- Must have a Bachelor degree in either Computer, Information Systems or Engineering related field preferred

- 5+ years of working experience in SOC/Enterprise Cybersecurity Architect role

- Strong knowledge of various security architecture methods such as Enterprise Architect Frameworks like TOGAF, SABSA, etc

- Must have broad architectural background with full-lifecycle experience of delivering IT Security solutions (including, but not limited to, Identity and Credential management; Access policy and management; Authentication and SSO; Authorization; Audit; Secure communications & cryptographic services; Network protection; Data protection & Privacy; Security administration)

- Ability to explain business principles of secure system designs in terms of business risk

- In depth Desktop OS and Server OS knowledge

- Strong networking and application knowledge

- Strong analytical and problem solving skills

- Network monitoring technology platforms such as Fidelis XPS, RSA or others

- End point protection tools, techniques and platforms such as CarbonBlack, Symantec, McAfee or others

- Internationally recognized technical certifications in relevant areas

- Hands-on experience with TCP/IP, security concepts, WAN and LAN concepts, Routing Protocols, Firewall Security policies

- Hands-on experience with industry leading security vendor platforms, including products such as Juniper security devices, ASA, Snort, Cisco IDS, Websense, NetForensics, etc

- Hands-on experience with industry leading network management platforms

- Practical experience on customer service processes and solving issues

- Experience in VPN technology, PKI, AAA, and IDS concepts

- Understanding of the principles of best practice security as embodied in ISO27001

About the Company

EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. Information about how EY collects and uses personal data and a description of the rights individuals have under data protection legislation are available on our site.

The MENA practice of EY has been operating in the region since 1923. For over 95 years, we have grown to over 7,500 people united across 21 offices and 16 countries, sharing the same values and an unwavering commitment to quality. As an organization, we continue to develop outstanding leaders who deliver exceptional services to our clients and who contribute to our communities. We are proud of our accomplishments over the years, reaffirming our position as the largest and most established professional services organization in the region