SOAR Engineering Lead: Secure Automation & Response

Ernst & Young Oman; Charleston (WV); Remote; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide playbook development, client advisory, and cross-functional delivery across security operations, incident response, and engineering teams.

Join a dynamic team shaping automation strategies, overseeing platform implementations, and driving measurable value from cybersecurity investments.

Qualifications

• Bachelor’s degree and 6–10 years in security automation or SOAR.
• Experience leading enterprise security automation or SOAR projects.
• Hands-on with enterprise SOAR platforms (Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security).
• Strong scripting (Python, PowerShell, JavaScript) and REST API experience.
• Knowledge of SOC processes, including incident response and threat detection.
• Ability to lead client-facing engagements and manage delivery risks.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery through deployment and transition.
• Advise clients on automation strategy, governance, and roadmaps to improve SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, remediation, and case management.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration platforms.
• Provide oversight for custom integrations, APIs, connectors, and cloud-native automation capabilities.
• Facilitate executive briefings, architecture reviews, and requirements sessions; translate findings into plans.
• Manage engagement scope, workplans, risks, staffing, and delivery milestones; ensure client satisfaction.
• Establish engineering standards, governance, testing practices, and production support models for automation.
• Lead, coach, and develop multidisciplinary teams; provide actionable feedback.
• Identify follow-on opportunities, support proposals, and grow the security automation practice.
• Stay aware of emerging threats, AI-assisted operations, and evolving SOAR platforms.

Skills

Leadership

Security Operations

SOC Automation

Client Advisory

Delivery Management

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide playbook development, client advisory, and cross-functional delivery across security operations, incident response, and engineering teams.

Join a dynamic team shaping automation strategies, overseeing platform implementations, and driving measurable value from cybersecurity investments.