SOAR Engineering Lead: Automate Threat Response

Ernst & Young Oman; Chattanooga (TN); Remote; USD 180,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, deliver scalable integrations, and mentor multidisciplinary teams to improve SOC effectiveness.

You’ll partner with security operations, incident response, threat detection, and engineering stakeholders to translate complex findings into actionable plans.

Qualifications

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field.
• 6-10 years of relevant experience in security automation, SOAR engineering, security operations, or related discipline.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on with enterprise SOAR platforms listed in the ad or comparable technologies.
• Strong software development and scripting skills in Python/PowerShell/JavaScript.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to operational transition.
• Advise clients on automation strategy, governance, platform selection, and roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design and development of playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management and more.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation capabilities.
• Facilitate workshops and translate findings into clear recommendations and implementation plans.
• Manage scope, risks, staffing, budget, and delivery milestones while maintaining client satisfaction.
• Establish engineering standards, governance, testing practices, and production support models.

Skills

Leadership

Security operations

Problem solving

Effective communication

Automation design

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, deliver scalable integrations, and mentor multidisciplinary teams to improve SOC effectiveness.

You’ll partner with security operations, incident response, threat detection, and engineering stakeholders to translate complex findings into actionable plans.