Senior SOAR Automation Manager

EY; Chicago (IL); Remote; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager in the United States to lead the design, delivery, and optimization of security automation solutions across enterprise environments. You will guide architecture, governance, and client advisory work, while managing cross-functional teams to deliver scalable, secure outcomes for security operations.

In this role, you will own playbook development, oversee integrations across SIEM, EDR/XDR, IAM and cloud platforms, and drive measurable value for clients.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field with 6–10 years of security automation/ SOAR experience.
• Experience leading design and delivery of security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms listed (or comparable).
• Strong software development and scripting in Python/PowerShell/JavaScript.
• Experience designing REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Lead end-to-end SOAR engagements from discovery to operational transition.
• Advise on automation strategy, governance, and SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct playbook design for incident triage, enrichment, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration tools.

Skills

Leadership

Security Operations

SOAR

Automation

Architecture

Python

REST APIs

Client advisory

Cloud platforms

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Swimlane

D3 Security

Tines

Job description

EY is seeking a SOAR Engineering Manager in the United States to lead the design, delivery, and optimization of security automation solutions across enterprise environments. You will guide architecture, governance, and client advisory work, while managing cross-functional teams to deliver scalable, secure outcomes for security operations.

In this role, you will own playbook development, oversee integrations across SIEM, EDR/XDR, IAM and cloud platforms, and drive measurable value for clients.