SOAR Engineering Manager: Automate & Elevate Cyber Response

Ernst & Young Oman; Montgomery (AL); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation initiatives, shaping automation strategies and overseeing complex enterprise implementations. You will work with security operations, incident response, threat detection, and engineering teams to deliver scalable, secure automation solutions.

Responsibilities include client advisory, playbook development, and cross-functional leadership.

Qualifications

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field.
• 6-10 years of experience in security automation/SOAR engineering or related disciplines.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane or comparable technologies.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Strong knowledge of SOC processes including alert triage, incident response, threat detection, threat intelligence, vulnerability management, and case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intelligence, ticketing, and collaboration platforms.
• Understanding of infrastructure, networking, operating systems, and major cloud platforms (Azure, AWS, GCP).
• Experience designing, testing, troubleshooting, operationalizing, and governing automation workflows in production environments.
• Knowledge of secure development practices, version control, testing methodologies, CI/CD concepts, and software engineering standards.
• Ability to lead client-facing engagements and communicate recommendations to senior stakeholders.
• Relevant industry or platform certifications or ability to obtain one after employment.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment and operational transition.
• Advise clients on automation strategy, operating models, governance, platform selection, and roadmaps to improve SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct the design and development of playbooks that automate incident triage, enrichment, investigation, containment, remediation, case management, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, vulnerability management, email security, network security, ticketing, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, reusable frameworks, and cloud-native automation capabilities.
• Facilitate executive briefings, architecture reviews, workshops, and requirements sessions; translate findings into recommendations and plans.
• Manage engagement scope, workplans, risks, staffing, financial performance, and delivery milestones; maintain service quality and client satisfaction.
• Establish engineering standards, governance, testing practices, documentation, and production support models for automation solutions.
• Lead, coach, and develop multidisciplinary teams; provide feedback and foster an inclusive, collaborative environment.
• Identify follow-on opportunities, contribute to proposals and statements of work, and help grow the security automation practice.
• Maintain awareness of emerging threats, AI-assisted security operations, automation technologies, cloud-native security capabilities, and evolving SOAR platforms.

Skills

Leadership

SOC knowledge

Automation strategy

REST APIs

Python scripting

Cloud platforms

Security operations

Client advisory

Education

Bachelor's degree

Tools

XSOAR

Splunk SOAR

Swimlane

Tines

Job description

EY is seeking a SOAR Engineering Manager to lead end-to-end security automation initiatives, shaping automation strategies and overseeing complex enterprise implementations. You will work with security operations, incident response, threat detection, and engineering teams to deliver scalable, secure automation solutions.

Responsibilities include client advisory, playbook development, and cross-functional leadership.