Lead SOAR Engineer & Cyber Automation Architect

EY; Hartford (CT); On-site; USD 145,000 - 260,000; Full time

Job summary

EY seeks a Sr. SOAR Engineering Manager to lead design, delivery and optimization of security automation solutions across diverse industries. You will guide automation strategy, architecture, and client advisory in partnership with security operations, incident response, and engineering teams.

You will manage end-to-end engagements, drive playbooks, and oversee integrations with SIEM, EDR/XDR, IAM, and cloud security, while mentoring multidisciplinary teams to deliver measurable client value.

Qualifications

• Bachelor's degree in CS/CE/Cybersecurity/IT/MIS and 6–10 years in security automation or SOAR.
• Experience leading enterprise security automation projects and client engagements.
• Hands-on with enterprise SOAR platforms and automation scripting languages.
• Ability to design and deliver scalable, secure automation architectures.
• Strong communication and stakeholder management in senior client contexts.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to production.
• Advise on automation strategy, operating models, and SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR deployments.
• Develop playbooks for incident triage, enrichment, investigation, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and more.

Education

Bachelor's degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY seeks a Sr. SOAR Engineering Manager to lead design, delivery and optimization of security automation solutions across diverse industries. You will guide automation strategy, architecture, and client advisory in partnership with security operations, incident response, and engineering teams.

You will manage end-to-end engagements, drive playbooks, and oversee integrations with SIEM, EDR/XDR, IAM, and cloud security, while mentoring multidisciplinary teams to deliver measurable client value.