Lead SOAR Engineering & Security Automation

EY; Palo Alto (CA); On-site; USD 181,000 - 302,000; Full time

Benefits offered by this job

Medical & dental coverage

Pension & 401(k)

Paid time off

Job summary

EY is seeking a SOAR Engineering Manager in the US to lead design, delivery, and optimization of security automation solutions. You will guide playbooks, integrations, and architecture across SIEM, EDR/XDR, IAM, and cloud security while coordinating with security operations, incident response, and business stakeholders.

The role emphasizes leadership, client advisory, and governance, with focus on scalable, secure automation that delivers measurable value and strengthens cyber resilience for

Qualifications

• Bachelor's degree in a related field and 6-10 years of security automation or SOAR experience.
• Experience leading teams delivering security automation in enterprise environments.
• Hands-on experience with enterprise SOAR platforms listed above.

Responsibilities

• Lead end-to-end SOAR and security automation engagements across discovery to operational transition.
• Advise on automation strategy, governance, and SOC effectiveness for clients.
• Own solution architecture and delivery quality for enterprise SOAR implementations.

Skills

Security automation

SOAR engineering

Python

REST APIs

Leadership

Client engagement

Cloud platforms

SOC processes

Education

Bachelor's degree in CS/CE/Cybersecurity

6-10 years relevant experience

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager in the US to lead design, delivery, and optimization of security automation solutions. You will guide playbooks, integrations, and architecture across SIEM, EDR/XDR, IAM, and cloud security while coordinating with security operations, incident response, and business stakeholders.

The role emphasizes leadership, client advisory, and governance, with focus on scalable, secure automation that delivers measurable value and strengthens cyber resilience for