SOAR Engineering Lead - Cybersecurity Automation

Ernst & Young Oman; Secaucus (NJ); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across diverse clients.

You will guide architecture, develop playbooks, and supervise engagements from discovery through deployment, partnering with security operations, incident response, and cloud security teams to enhance SOC effectiveness and automate protections.

Qualifications

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field.
• 6–10 years of relevant experience in security automation, SOAR engineering, security operations, or cybersecurity engineering.
• Experience leading teams or workstreams responsible for design and delivery of security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable technologies.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Strong knowledge of SOC processes including alert triage, incident response, threat detection, vulnerability management, and case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, threat intel, ticketing, and collaboration platforms.
• Understanding of infrastructure, networking, operating systems, and major cloud platforms (Azure, AWS, GCP).
• Experience designing, testing, troubleshooting, and governing automation workflows in production.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment.
• Advise on automation strategy, operating models, governance, platform selection, roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design and development of playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management, and ticketing.
• Provide technical oversight for custom integrations, APIs, connectors, and reusable frameworks.
• Facilitate executive briefings, architecture reviews, and stakeholder meetings; translate findings into plans.
• Manage engagement scope, workplans, risks, staffing, and delivery milestones; ensure client satisfaction.
• Establish engineering standards, testing practices, and production support models for automation solutions.
• Lead, coach, and develop multidisciplinary teams with an inclusive culture.
• Identify follow-on opportunities, support proposals, and grow the security automation practice.
• Maintain awareness of emerging threats, AI-assisted security operations, and evolving SOAR platforms.

Skills

SOAR platforms

Python

REST APIs

Security operations

Leadership

Cloud security

Education

Bachelor's degree in CS/Engineering

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Terraform

CloudFormation

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across diverse clients.

You will guide architecture, develop playbooks, and supervise engagements from discovery through deployment, partnering with security operations, incident response, and cloud security teams to enhance SOC effectiveness and automate protections.