SOAR Engineering Lead: Security Automation & Orchestration

EY; Baltimore (MD); Remote; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation engagements and drive architecture and delivery for enterprise SOAR implementations. You will advise clients on automation strategy, governance, platform selection, and capability roadmaps, collaborating with security, engineering, and business stakeholders.

You will oversee playbooks, integrations, and custom automation, while guiding teams, managing risks, and delivering measurable value.

Qualifications

• A bachelor's degree in a technical field and 6-10 years of relevant experience in security automation or SOAR engineering.
• Experience leading teams or workstreams responsible for design and delivery of security automation in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Cortex XSOAR, Splunk SOAR, or comparable technologies.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Understanding of SOC processes including alert triage, incident response, threat detection, threat intelligence, vulnerability management, and case management.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery through deployment and operational transition.
• Advise clients on automation strategy, operating models, governance, platform selection, and roadmaps to improve SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.

Skills

Leadership

Security operations

Program management

Executive communication

Systems thinking

Client advisory

Automation strategy

Decision making

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

REST APIs

Python

Job description

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation engagements and drive architecture and delivery for enterprise SOAR implementations. You will advise clients on automation strategy, governance, platform selection, and capability roadmaps, collaborating with security, engineering, and business stakeholders.

You will oversee playbooks, integrations, and custom automation, while guiding teams, managing risks, and delivering measurable value.