SOAR Engineering Leader: Automate and Elevate SOC

EY; Memphis (TN); Remote; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a senior SOAR Engineering Manager to lead end-to-end security automation initiatives. You will guide architecture, delivery, and client advisory across security operations, incident response, threat detection, and engineering teams to realize measurable value from cybersecurity investments.

Responsibilities include designing playbooks, integrating SIEM/EDR/IAM, and overseeing engagements, scoping, and milestones while maintaining quality and client satisfaction.

Qualifications

• Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS or related field plus 6–10 years of relevant experience.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms such as Cortex XSOAR, M365 Sentinel, Splunk SOAR, Swimlane, or equivalents.
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar.
• Experience designing REST APIs, web services, SDKs and custom integrations.
• Knowledge of SOC processes and integration of security technologies across SIEM/EDR/IAM/cloud.
• Understanding of cloud platforms (Azure, AWS, GCP) and network/OS fundamentals.

Responsibilities

• Lead end-to-end SOAR engagements from strategy through deployment and transition.
• Advise on automation strategy, governance, platform selection, and SOC effectiveness.
• Own architecture and delivery quality for enterprise SOAR implementations.
• Design playbooks to automate triage, enrichment, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and ticketing systems.
• Provide oversight for custom integrations, APIs, connectors, and cloud-native automation.
• Facilitate architecture reviews, workshops, and stakeholder interviews; translate findings into plans.

Skills

Security automation

SOAR engineering

Security operations

Python scripting

REST APIs

Cloud platforms

Education

Bachelor's degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Swimlane

Tines

D3 Security

Google Cloud Security

Job description

EY is seeking a senior SOAR Engineering Manager to lead end-to-end security automation initiatives. You will guide architecture, delivery, and client advisory across security operations, incident response, threat detection, and engineering teams to realize measurable value from cybersecurity investments.

Responsibilities include designing playbooks, integrating SIEM/EDR/IAM, and overseeing engagements, scoping, and milestones while maintaining quality and client satisfaction.