SOAR Engineering Lead - Security Automation & Orchestration

Ernst & Young Oman; Columbia (SC); Remote; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across diverse client environments. You will guide architecture, playbook development, and cross-functional delivery with security operations, incident response, and engineering teams.

You will shape automation strategies, oversee enterprise implementations, and help clients realize value from cybersecurity investments while driving team development and project governance.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity or related field with 6–10 years of experience.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on with enterprise SOAR platforms and automation tooling.
• Strong software development and scripting experience in Python, PowerShell, JavaScript.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to operational transition.
• Advise clients on automation strategy, governance, platform selection, and SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management, and ticketing systems.
• Provide technical oversight for APIs, connectors, and cloud-native automation capabilities.
• Facilitate architecture reviews, workshops, and sessions; translate findings into actionable plans.
• Manage engagement scope, risks, staffing, budgets, and milestones while ensuring quality and client satisfaction.
• Establish engineering standards, governance, testing, and production support for automation solutions.
• Lead and mentor multidisciplinary teams, provide feedback, and foster inclusive culture.
• Identify follow-on opportunities, contribute to proposals, and grow the security automation practice.

Skills

Security leadership

Security operations

Automation & SOAR

API integrations

DevSecOps

Python/automation scripting

CI/CD practices

Stakeholder management

Education

Bachelor's degree in CS/Engineering/Cybersecurity or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions across diverse client environments. You will guide architecture, playbook development, and cross-functional delivery with security operations, incident response, and engineering teams.

You will shape automation strategies, oversee enterprise implementations, and help clients realize value from cybersecurity investments while driving team development and project governance.