SOAR Automation Lead - Enterprise Security Engineer

Ernst & Young Oman; Concord (NH); Remote; USD 150,000 - 280,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, playbook development, and cross-functional delivery teams to reduce incident response times and improve SOC effectiveness.

The role requires strong leadership, hands-on SOAR experience, and the ability to translate complex findings into practical, scalable automation strategies for enterprise security programs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field with 6-10 years in security automation or SOAR.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms and automation tooling.
• Strong software development and scripting with Python, PowerShell, or JavaScript.
• Experience designing and consuming REST APIs, web services, and custom integrations.
• Deep knowledge of SOC processes and security operations.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from strategy through deployment and transition.
• Advise clients on automation strategy, operating models, governance, and roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design and development of playbooks for incident triage, enrichment, investigation, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability mgmt, and ticketing.
• Provide oversight for custom integrations, APIs, connectors, and cloud-native automation.
• Facilitate workshops and briefings; translate findings into actionable plans.
• Manage scope, workplans, risks, staffing, and delivery milestones for engagements.
• Establish engineering standards, testing practices, and production support models.

Skills

Security automation

Leadership

Client advisory

Delivery management

Decision making

Cross-functional collaboration

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, playbook development, and cross-functional delivery teams to reduce incident response times and improve SOC effectiveness.

The role requires strong leadership, hands-on SOAR experience, and the ability to translate complex findings into practical, scalable automation strategies for enterprise security programs.