SOAR Engineer & Security Automation Lead

Ernst & Young Oman; Philadelphia (Philadelphia County); Remote; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide end-to-end SOAR initiatives, working with security operations, incident response, and business stakeholders to translate requirements into scalable, secure automation.

You will oversee architecture, playbook development, and integrations across SIEM, EDR/XDR, IAM, and cloud security, while mentoring multidisciplinary teams and driving measurable value for

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field and 6–10 years in security automation or SOAR.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, or equivalents.
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar.
• Experience designing REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment and operations.
• Advise clients on automation strategy, governance, and platform selection to improve SOC effectiveness.
• Own solution architecture and ensure scalable, secure designs for enterprise SOAR deployments.
• Direct playbook design for incident triage, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration tools.

Skills

Security automation

SOAR engineering

Leadership

Client advisory

Architecture design

REST APIs

Python/PowerShell

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Tines

D3 Security

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide end-to-end SOAR initiatives, working with security operations, incident response, and business stakeholders to translate requirements into scalable, secure automation.

You will oversee architecture, playbook development, and integrations across SIEM, EDR/XDR, IAM, and cloud security, while mentoring multidisciplinary teams and driving measurable value for