Consulting_Cyber Detection

Cyber Detection & Response Engineer, Cross-Platform Management, Senior

Location: Taguig

Other locations: Primary Location Only

Date: Oct 25, 2026

Requisition ID: 1696292

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity

In your role at EY, you’ll be inspired by a team of the brightest business and technical minds in cyber security. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.

Your key responsibilities

We are seeking a highly skilled and experienced Cybersecurity Engineer, Cross-Platform Management to join our team. The ideal candidate will have a strong background in designing, building, and migrating Security Orchestration, Automation & Response (SOAR), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Next-Generation Antivirus (NGAV), Cloud Security and Network Security Solutions. The Cybersecurity Engineer’s responsibilities include but not limited to ensuring the security and integrity of our company's data and infrastructure.

Responsibilities for success include, but not limited to:

• Planning, design, build, implementing, managing and upgrading security systems to protect data, systems and network
• Ensuring that the client data and infrastructure are protected by continuously reviewing, enabling and implementing appropriate security controls & enterprise infrastructure. Identifying use cases on existing security systems and provide recommendations to improve current state
• Conduct regular capacity planning assessments on security appliances and licenses, provide quarterly recommendations to the relevant stakeholders. Determine the hardware and software asset’s lifecycle, plan ahead the recommendation on hardware refresh before it reaches its EOL/EOS state
• Process security project communications and track with various technical teams until it reaches completion, document project steps & lessons learned and work with other technical teams on integration, deployment & enhancement projects and any other engineering tasks
• Develop and design security project plans for SIEM, NDR, XDR, NGAV, NGFW, MDM, DLP, SWG, UEBA, primarily on cloud, DevOps and application security based on zero trust framework in compliance with applicable regulatory and data privacy requirements
• Contribute to the development of the various TechOps strategies and roadmaps as required to enable realization of the business strategies and objectives

Preferred Qualifications:

• Ideal candidate must have a minimum of 6+ yearsof cybersecurity design, build and implementation experiences in a complex or large-scale environment or at least a minimum of two combined qualifications and/or experiences below:
• At least 3 years of hands-on experience in implementing, deploying & managing SIEM tools such as Splunk, Microsoft Sentinel, Qradar, Mcafee, Arcsight, LogRhythm, including python scripting, usage of regular expressions and natural language queries or;
• Extensive knowledge and hands-on experience in the areas of endpoint security (wintel & linux), web security, network (IDS, IPS, FW) security, data loss prevention (DLP) deployment or;
• Experience with Security Assessment tools (NMAP, Nessus, Metasploit, Netcat), vulnerability analysis, penetration testing, remediation and compliance, usage of automation tools for patch and vulnerability management or;
• Hands-on design and build experience for EDR, XDR and NGAV solutions such as Crowdstrike, Microsoft Defender, Cortex XSIAM, Carbon Black, Sophos, etc. or;
• Understanding of security principles, techniques, and technologies such as SANS Critical Security Controls, OWASP Top 10, Mitre Attack, Cyber Kill Chain, PCI-DSS, ISO 27001/02, SOC2, GDPR and other regulatory compliance frameworks, or;
• Combined hands-on experience on DevSecOps, Windows & Linux Server Administration, Network Administration, Storage & Backup, Systems Administration, Middleware, Application Administration and Endpoint Security Engineering. Network security zo