Cyber & SOAR Engineer: Automation Lead

Ernst & Young Oman; Cleveland (OH); On-site; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide multi-disciplinary teams, engage with clients, and shape automation strategies across SOC ecosystems.

Responsibilities include architecting scalable integrations, overseeing playbook development, and ensuring production-grade delivery while maintaining client satisfaction and governance.

Qualifications

• Bachelor's degree in CS/CE/Cybersecurity/IT/MIS or related field with 6–10 years of relevant experience.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on with enterprise SOAR platforms (Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google SOAR, Tines, D3, Swimlane).
• Strong software development and scripting (Python, PowerShell, JavaScript).
• Experience designing REST APIs, web services, and integrations.

Responsibilities

• Lead end-to-end SOAR engagements from discovery through deployment and transition.
• Advise clients on automation strategy, operating models, and governance to improve SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design of playbooks to automate incident triage, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management, and ticketing.

Skills

Leadership

SOAR

Security automation

Architecture

Client advisory

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide multi-disciplinary teams, engage with clients, and shape automation strategies across SOC ecosystems.

Responsibilities include architecting scalable integrations, overseeing playbook development, and ensuring production-grade delivery while maintaining client satisfaction and governance.