SOAR Engineering Lead: Enterprise Security Automation

Ernst & Young Oman; Cincinnati (OH); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide end-to-end SOAR initiatives, work with SOC teams, and shape automation strategies to improve threat response and visibility across clients.

You will coordinate playbook development, integrations with SIEM/EDR/IAM, and cross-functional delivery across security operations, incident response, and engineering. Strong leadership and communication are essential.

Qualifications

• A bachelor's degree in Computer Science, Cybersecurity, or related field and 6–10 years of relevant experience.
• Experience leading design and delivery of security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms (Palo Alto Cortex XSOAR, Splunk SOAR, etc.).
• Strong software development and scripting experience (Python, PowerShell, JavaScript, etc.).
• Experience designing REST APIs and custom integrations.

Responsibilities

• Lead end-to-end SOAR engagements from discovery through deployment and operational transition.
• Advise clients on automation strategy, governance, and platform selections.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design and development of playbooks for incident triage and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration tools.
• Provide technical oversight for custom integrations, APIs, and reusable frameworks.
• Facilitate executive briefings, architecture reviews, and stakeholder interviews.
• Manage engagement scope, risks, staffing, and financial performance.
• Establish engineering standards, testing practices, and production support models.
• Lead, coach, and develop multidisciplinary teams; foster inclusive culture.
• Identify follow-on opportunities and help grow the security automation practice.
• Maintain awareness of emerging threats and AI-assisted security operations.

Skills

Leadership

Security operations

Decision making

Communication

Automation design

Architecture oversight

Client advisory

Team development

Education

Bachelor's degree in Computer Science / related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide end-to-end SOAR initiatives, work with SOC teams, and shape automation strategies to improve threat response and visibility across clients.

You will coordinate playbook development, integrations with SIEM/EDR/IAM, and cross-functional delivery across security operations, incident response, and engineering. Strong leadership and communication are essential.