Cyber & SOAR Automation Engineering Manager

Ernst & Young Oman; Alpharetta (GA); On-site; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Total Rewards package

Job summary

EY is seeking a SOAR Engineering Manager in the United States to lead end-to-end security automation engagements across SOC and incident response teams. You will own solution architecture, deliver scalable playbooks, and guide client adoption of automation technologies.

You will collaborate with security operations, engineering, and business stakeholders to shape automation strategy, oversee platform implementations, and drive measurable value from cyber investments while developing

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, MIS, or related field plus 6–10 years in security automation or SOAR.
• Experience leading teams delivering security automation/SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms (listed in tools) or equivalent.
• Strong software development and scripting with Python, PowerShell, JS, or automation languages.
• Experience designing/consuming REST APIs, web services, SDKs, and integrations.
• Solid knowledge of SOC processes: alert triage, IR, threat detection, vulnerability management, case management.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to operations.
• Advise clients on automation strategy, governance, platform selection, and roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct playbook design for incident triage, enrichment, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, and ticketing systems.
• Provide oversight for APIs, connectors, and reusable automation frameworks.
• Lead workshops and translate findings into actionable implementation plans.
• Manage engagement scope, risks, staffing, budgets, and milestones.

Skills

Leadership

Security operations

Automation

SOAR

Client advisory

Education

Bachelor's degree in CS / Cybersecurity / related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager in the United States to lead end-to-end security automation engagements across SOC and incident response teams. You will own solution architecture, deliver scalable playbooks, and guide client adoption of automation technologies.

You will collaborate with security operations, engineering, and business stakeholders to shape automation strategy, oversee platform implementations, and drive measurable value from cyber investments while developing