Con - Technology Con - Cybersecurity - SIEM or SOAR Eng - Manager - Multiple Positions - 1749311

EY; Las Vegas (NV); On-site; USD 132,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

Ernst & Young U.S. LLP in Las Vegas is seeking a Cybersecurity SIEM/SOAR Engineering Manager to lead security operations deployments for clients.

You will manage multiple projects, mentor consultants, and drive innovative SIEM/SOAR solutions with Microsoft Sentinel, CrowdStrike, and Splunk in a fast‑paced environment. Responsibilities include shaping security architectures, coordinating with Advanced Security Centers, and delivering risk‑mocused engagement outcomes while expanding advisory

Qualifications

• Bachelor’s degree in MIS, Cybersecurity, CS, Engineering, Business, Finance or related field.
• 3 years of experience in information security focusing on SIEM and SOAR solutions with hands-on work on at least one platform.
• 3 years in consulting, including client needs, proposals, and presentations.

Responsibilities

• Lead and motivate teams delivering security and IT risk solutions.
• Build strong client relationships as a trusted advisor for SIEM/SOAR deployments.
• Oversee deployments with attention to quality, risk, and budgets.

Skills

SIEM platforms

SOAR

Security leadership

Client engagement

Team mentoring

Networking basics

Education

Bachelor's degree in MIS/Cybersecurity/CS/Engineering

Master's degree (optional)

Tools

Microsoft Sentinel

CrowdStrike NextGen SIEM

Google Chronicle

Cribl

Databahn

Apache NiFi

Job description

Con - Technology Con - Cybersecurity - SIEM or SOAR Eng - Manager - Multiple Positions - 1749311

Location: Las Vegas

Other locations: Primary Location Only

Date: 7 Oct 2026

Requisition ID: 1749311

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Consulting - Technology Consulting - Cybersecurity – SIEM/SOAR Engineering (Manager) (Multiple Positions) (1749311) , Ernst & Young U.S. LLP, Las Vegas, NV.

Provide reliable solutions to clients’ intricate technology risks and vulnerabilities as part of the Cyber Threat and Vulnerability Management (TVM) team, playing a pivotal role in understanding and contextualizing clients’ cybersecurity threats, as well as in evaluating, enhancing, and developing their security operations to counter these threats effectively. Spearhead the deployment of cutting‑edge security solutions for clients, aiding them in safeguarding their enterprises, collaborating with our Advanced Security Centers, providing access to the most advanced tools to combat cybercrime effectively. Be responsible for managing and delivering multiple processes, projects, or solutions with a focus on quality and risk management. Lead and motivate teams in delivering security and IT risk solutions, fostering an inclusive environment, mentoring junior consultants, and providing technical leadership. Maintain current knowledge of IT and industry trends to address client service issues and deliver exceptional client service, with a focus on advanced SIEM platforms like Microsoft Sentinel, CrowdStrike NextGen SIEM, and Splunk. Build strong client relationships as a trusted advisor in the implementation and management of security solutions. Demonstrate deep technical expertise in advanced SIEM technologies and a commitment to continuous learning in cybersecurity advancements. Understand the strategic importance of SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) in protecting business operations and stay informed on industry developments and advisory services capabilities. Understand the importance of Extract, Transform, and Load (ETL) tools such as Cribl, Databahn, and Apache NiFi in helping clients manage their data streams. Apply knowledge of complex information systems and AI technologies to identify engagement issues and communicate effectively with clients. Possess a thorough understanding of the incident response process and familiarity with frameworks like MITRE ATT&CK to enhance threat detection and response capabilities. Enhance processes continuously and identify innovative solutions through research and best practices. Act as a technical leader, guiding your team to resolve challenges and develop impactful policies and procedures. Engage with clients daily, leading sessions and workstreams, and identifying additional service opportunities. Manage engagement economics and implement resource plans and budgets.

Manage and motivate teams of professionals with diverse skills and backgrounds. Consistently deliver quality client services by monitoring progress. Demonstrate in-depth technical capabilities and professional knowledge. Maintain long‑term client relationships and networks. Cultivate business development opportunities.

Full time employment, Monday – Friday, 40 hours per week, 8:30 am – 5:30 pm.

MINIMUM REQUIREMENTS:

Must have a Bachelor’s degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 5 years of progressive, post-baccalaureate relevant work experience. Alternatively, the employer will accept a Master’s degree in Management Information Systems (MIS), Cybersecurity, Computer Science, Engineering, Business, Accounting, Finance or a related field and 4 years of relevant work experience.

Must have 3 years of experience in information security, with a focus on SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solutions, including hands‑on experience with at least one of the following leading platforms-- Microsoft Sentinel, Crowdstrike NextGen SIEM, or Google Chronicle.

Must have 3 years of experience in consulting, including addressing client needs, developing proposals, and delivering presentations.

Must have 2 years of experience with security concepts and methods, including vulnerability assessments, privacy assessments, intrusion detection, incident response (including knowledge of the incident response process and frameworks), security policy creation, enterprise security strategies, architectures, and governance.

Must have 2 years of experience in networking, operating system fundamentals, and security technologies, including firewalls or IDS/IPS.

Must have 2 years of experience in leading process definition, workflow design, and process mapping, with an emphasis on integrating SIEM and SOAR capabilities into business operations.

Requires travel up to 80%, of which 10% may be international, to serve client needs.

Employer will accept any suitable combination of education, training, or experience.

What we offer

We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary for this job is $147,180.00 per year. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team‑led and leader‑enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

For those living in California, please click here for additional information.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, type Option 2 (HR-related inquiries) and then type Option 1 (HR Shared Services Center), which will route you to EY’s Talent Shared Services Team or email SSC Customer Support at [e-mail].

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.