SOAR Engineering Lead: Automate & Elevate Cyber Defense

EY; Seattle (WA); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Job summary

EY in the United States is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions that help clients detect and respond to threats faster. You will blend technical leadership with client advisory, delivery management, and team development across security operations, incident response, and engineering.

You will shape automation strategies, oversee platform implementations, and ensure scalable, secure integrations with SIEM, EDR/XDR, IAM, and

Qualifications

• Bachelor’s degree in a related field and 6–10 years of relevant experience in security automation, SOAR engineering, or security operations.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms listed in the ad.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or similar.

Responsibilities

• Lead end-to-end SOAR engagements from discovery to deployment.
• Advise on automation strategy, governance, and SOC effectiveness.
• Own solution architecture and delivery quality for enterprise deployments.
• Develop playbooks for incident triage, enrichment, investigation, containment, remediation, case management, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security.

Skills

SOAR platforms

Python / scripting

REST APIs

Security Operations

Leadership

Education

Bachelor's degree in CS/related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel

Splunk SOAR

D3 Security

Swimlane

Job description

EY in the United States is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions that help clients detect and respond to threats faster. You will blend technical leadership with client advisory, delivery management, and team development across security operations, incident response, and engineering.

You will shape automation strategies, oversee platform implementations, and ensure scalable, secure integrations with SIEM, EDR/XDR, IAM, and