Senior SOAR Engineer & Automation Leader

Ernst & Young Oman; Fort Worth (TX); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation engagements, shaping automation strategies and architectures that improve SOC effectiveness. You will partner with security operations, incident response, engineering, and clients to deliver measurable value from automation.

You will guide playbook development, integrations, and production governance while mentoring teams and driving continuous improvement across large enterprise environments.

Qualifications

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field and 6-10 years in security automation or SOAR.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable technologies.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Strong knowledge of SOC processes including alert triage, incident response, threat detection, and case management.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery through deployment and operational transition.
• Advise clients on automation strategy, operating models, governance, platform selection, and roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations, ensuring scalable, secure designs.
• Direct the design and development of playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation capabilities.
• Facilitate executive briefings, architecture reviews, and workshops; translate findings into actionable plans.
• Manage engagement scope, risks, staffing, and milestones while maintaining service quality and client satisfaction.
• Establish engineering standards, governance, testing practices, and production support models.
• Lead, coach, and develop multidisciplinary teams; foster inclusive, collaborative environments.
• Identify follow-on opportunities, contribute to proposals, and help grow the security automation practice.
• Maintain awareness of evolving threats, AI-assisted security operations, and automation technologies.

Skills

Leadership

Security operations

SOAR

Python

REST APIs

Education

Bachelor's degree in CS/Engineering/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Job description

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation engagements, shaping automation strategies and architectures that improve SOC effectiveness. You will partner with security operations, incident response, engineering, and clients to deliver measurable value from automation.

You will guide playbook development, integrations, and production governance while mentoring teams and driving continuous improvement across large enterprise environments.