Remote SOAR Engineer & Security Automation Lead

Ernst & Young Oman; Louisville (KY); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plans

Paid time off

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide architecture, delivery, and client advisory across SOC-related initiatives.

Join EY’s global team to work on security automation projects, architectures, and playbooks, coordinating with security operations, incident response, and engineering stakeholders to drive measurable value for clients.

Qualifications

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field, and 6-10 years of relevant experience.
• Experience leading teams for security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane.
• Strong software development and scripting using Python, PowerShell, JavaScript, or similar languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Deep knowledge of SOC processes including alert triage, incident response, threat detection, vulnerability management, and case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, threat intel, ticketing, and collaboration platforms.
• Understanding of infrastructure, networking, operating systems, and cloud platforms (Azure, AWS, GCP).
• Ability to lead client-facing engagements and communicate recommendations to senior stakeholders.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to operational transition.
• Advise clients on automation strategy, operating models, governance, and capability roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct the design and development of playbooks for incident triage, enrichment, investigation, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, and reusable frameworks.
• Facilitate architecture reviews, workshops, and requirements sessions; translate findings into actionable plans.
• Manage engagement scope, risks, staffing, and delivery milestones while ensuring client satisfaction.
• Establish engineering standards, testing practices, and production support models for automation solutions.
• Lead, coach, and develop multidisciplinary teams and foster an inclusive environment.
• Identify follow-on opportunities, contribute to proposals, and grow the security automation practice.
• Maintain awareness of emerging threats, AI-assisted security operations, and evolving SOAR platforms.

Skills

Security operations

SOAR engineering

Leadership

Python scripting

REST APIs

Client advisory

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Cloud Security

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide architecture, delivery, and client advisory across SOC-related initiatives.

Join EY’s global team to work on security automation projects, architectures, and playbooks, coordinating with security operations, incident response, and engineering stakeholders to drive measurable value for clients.