Cybersecurity Manager - Cyber Detection & Response

The Cybersecurity Detection & Response (CDR) team is part of the GDS PL Consulting division at EY GDS, focusing on designing, delivering, and improving security monitoring, detection, investigation, and response capabilities across various technologies and environments.

• Strong professional experience in cybersecurity detection and response, security operations, incident response, or related consulting services.
• Experience across multiple CDR areas such as SIEM, detection engineering, security automation, incident response, transformation, governance, or operating model design.
• Experience leading cybersecurity projects, workstreams, or multidisciplinary delivery teams.
• Ability to design CDR solutions that address business requirements.
• Understanding of AI application within CDR, including opportunities, limitations, security risks, validation requirements, and need for human oversight.
• Strong understanding of detection use-case development, security data management, and security operations processes.
• Experience engaging senior technical and business stakeholders and translating complex requirements into practical recommendations.
• Experience managing scope, delivery quality, risks, dependencies, resources, and stakeholder expectations.
• Ability to lead teams, review deliverables, resolve delivery issues, and provide clear direction in complex environments.
• Experience contributing to proposals, RFP responses, solutioning, effort estimation, or business development activities.
• Strong communication, presentation, leadership, and problem-solving skills.
• Professional proficiency in English.

Nice to have:

• Experience with SOAR, security workflow automation, or security tool integrations.
• Working knowledge of query and scripting languages.
• Experience using AI-enabled capabilities within SIEM, SOAR, EDR, XDR, or related cybersecurity platforms.
• Familiarity with MITRE ATT&CK, NIST CSF, and established incident response methodologies.
• Experience with cloud security monitoring across Microsoft Azure, AWS, or Google Cloud.
• Relevant cybersecurity or technology certifications.
• Consulting background.
• Additional European language skills (German, French, Spanish).

• Lead CDR engagements and workstreams from planning and solution design through delivery and closure.
• Design practical solutions across security monitoring, detection engineering, incident response, automation, and security operations.
• Apply AI-enabled capabilities to improve detection, investigation, response, automation, and security operations, with appropriate validation and human oversight.
• Guide SIEM, SOAR, EDR, XDR, log management, integration, migration, and detection content activities.
• Translate client requirements, risks, and operational challenges into clear solution designs, delivery plans, and improvement roadmaps.
• Facilitate workshops and communicate recommendations to technical teams, business stakeholders, and senior leadership.
• Lead, coach, and review the work of consultants while supporting their professional and technical development.
• Contribute to proposals, RFP responses, solution development, effort estimation, presentations, and client discussions.
• Support team planning, workload allocation, utilization, recruitment, knowledge development, and practice priorities.
• Develop reusable CDR methods, accelerators, service offerings, and delivery assets.