SOAR Engineering Lead - Security Automation

EY; Boston (MA); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical & Dental

401(k) Plan

Paid time off

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for diverse clients. You will guide architecture, playbook development, and cross-functional delivery across SOC-related functions.

Ideal candidates bring hands-on SOAR experience, cloud and security operations knowledge, and the ability to mentor multidisciplinary teams while driving measurable value for clients.

Qualifications

• Bachelor's degree in a related field and 6–10 years in security automation or SOAR.
• Experience leading design and delivery of security automation in enterprise environments.
• Hands-on with enterprise SOAR platforms listed in the job description.
• Strong software development experience with automation-focused languages.
• Experience designing REST APIs and custom integrations.
• Knowledge of SOC processes and incident response.

Responsibilities

• Lead end-to-end SOAR engagements from discovery to operational transition.
• Advise on automation strategy, operating models and governance.
• Own solution architecture and delivery quality for enterprise SOARs.
• Develop playbooks for incident triage, investigation, containment and reporting.
• Oversee integrations across SIEM, IAM, cloud security, threat intel and more.
• Provide technical oversight for custom integrations and APIs.

Skills

Leadership

Security operations

SOAR

Python

REST APIs

Cloud platforms

Client advisory

Education

Bachelor's degree in CS/Eng/IT or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for diverse clients. You will guide architecture, playbook development, and cross-functional delivery across SOC-related functions.

Ideal candidates bring hands-on SOAR experience, cloud and security operations knowledge, and the ability to mentor multidisciplinary teams while driving measurable value for clients.