Senior SOAR Engineer & Automation Lead

Ernst & Young Oman; Dallas (TX); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide architecture, playbook development, and cross-functional delivery across SOC stakeholders.

You will collaborate with security operations, incident response, threat detection, and engineering teams to shape automation strategies and deliver measurable value from cybersecurity investments.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field and 6–10 years in security automation or SOAR.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, etc.).
• Strong software development and scripting (Python, PowerShell, JavaScript).
• Experience designing and consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of SOC processes including alert triage, incident response, threat detection, vulnerability management, and case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intel, ticketing, and collaboration tools.
• Understanding of infrastructure, networking, OS, and major cloud platforms (Azure, AWS, GCP).

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment.
• Advise on automation strategy, operating models, governance, and roadmaps for SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR deployments.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management, email, network, and collaboration tools.
• Provide oversight for custom integrations, APIs, connectors, and reusable automation frameworks.
• Lead executive briefings, architecture reviews, and stakeholder interviews; translate findings into actionable plans.
• Manage engagement scope, risks, staffing, and delivery milestones with quality and client satisfaction.

Skills

Leadership

Problem solving

Critical thinking

Security operations knowledge

Executive presence

Communication skills

Automation design

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

REST APIs

Python

CI/CD

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide architecture, playbook development, and cross-functional delivery across SOC stakeholders.

You will collaborate with security operations, incident response, threat detection, and engineering teams to shape automation strategies and deliver measurable value from cybersecurity investments.