SOAR Engineering Manager: Automation & Security Orchestration

Ernst & Young Oman; Atlanta (GA); Remote; USD 145,000 - 265,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery and optimization of security automation solutions across enterprise environments. You will guide architecture, playbooks, and integrations with SIEM, EDR/XDR, IAM, and cloud security, while mentoring cross-functional teams and shaping automation strategy for clients.

You will manage scope, risks and milestones, communicate with senior stakeholders, and drive measurable value from cybersecurity investments.

Qualifications

• A bachelor's degree in Computer Science, Cybersecurity, IT, or related field with 6-10 years in security automation or SOAR.
• Experience leading teams or workstreams responsible for design and delivery of security automation in enterprise environments.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Sentinel, Splunk SOAR, Tines, D3, Swimlane, etc.).
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar.
• Experience designing and consuming REST APIs, web services, SDKs, and integrations.
• Deep knowledge of SOC processes including alert triage, incident response, threat detection and case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, cloud, ticketing, and collaboration tools.
• Understanding of infrastructure, networking, OS, and cloud platforms (Azure, AWS, GCP).
• Experience designing, testing, troubleshooting and governing automation workflows in production.
• Knowledge of secure DevOps practices, version control, testing, CI/CD, and software standards.
• Ability to lead client-facing engagements and communicate recommendations to senior stakeholders.
• Relevant certifications or ability to obtain one after employment.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to operational transition.
• Advise clients on automation strategy, operating models, governance, and platform choices.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct the design and development of playbooks for incident triage, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and threat intel.
• Provide technical oversight for custom integrations, APIs, connectors, and reusable frameworks.
• Facilitate executive briefings, architecture reviews, and requirements sessions.
• Manage engagement scope, risks, staffing, budgets, and milestones.
• Establish engineering standards, testing practices, and production support models.
• Lead, coach, and develop multidisciplinary teams in a collaborative environment.
• Identify follow-on opportunities, contribute to proposals, and grow the practice.
• Maintain awareness of emerging threats and evolving SOAR platforms.

Skills

Leadership

Security operations

Executive communication

Multitask management

Education

Bachelor's degree in CS/CE/Cybersecurity/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery and optimization of security automation solutions across enterprise environments. You will guide architecture, playbooks, and integrations with SIEM, EDR/XDR, IAM, and cloud security, while mentoring cross-functional teams and shaping automation strategy for clients.

You will manage scope, risks and milestones, communicate with senior stakeholders, and drive measurable value from cybersecurity investments.