Lead SOAR Engineer & Automation Architect

EY; Sacramento (CA); Remote; USD 145,000 - 266,000; Full time

Job summary

EY seeks an experienced SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide cross-functional teams, advise on automation strategy, and oversee platform implementations to deliver measurable cyber resilience for clients.

You will manage scopes, risks, and milestones, coach multidisciplinary teams, and drive governance, testing, and production support across SIEM, EDR/XDR, IAM, cloud security, and APIs.

Qualifications

• Bachelor's degree in a relevant field and 6–10 years in security automation or SOAR engineering.
• Experience leading design and delivery of security automation in enterprise environments.
• Hands-on with major SOAR platforms and strong software development skills.

Responsibilities

• Lead end-to-end SOAR engagements from discovery through deployment and transition.
• Advise on automation strategy, governance, and platform selection for SOC improvements.
• Own solution architecture and ensure scalable, secure enterprise designs.
• Develop playbooks for incident triage, enrichment, investigation and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and ticketing systems.
• Provide oversight for custom integrations, APIs, and cloud-native automation.
• Lead client workshops, translate findings into actionable plans, manage scope and risks.
• Establish engineering standards, testing, and production support for automation.

Skills

Security automation

SOAR engineering

Python scripting

REST APIs

Stakeholder management

Team leadership

Education

Bachelor's degree in CS/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel

Splunk SOAR

Tines

Swimlane

Job description

EY seeks an experienced SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide cross-functional teams, advise on automation strategy, and oversee platform implementations to deliver measurable cyber resilience for clients.

You will manage scopes, risks, and milestones, coach multidisciplinary teams, and drive governance, testing, and production support across SIEM, EDR/XDR, IAM, cloud security, and APIs.