SOAR Engineering Manager — Automation & SOC Leader

EY; San Jose (CA); Remote; USD 181,000 - 302,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions across SOC environments. You will drive end-to-end engagements, provide strategic direction, and oversee complex integrations with SIEM, IAM, and cloud security.

You will guide cross-functional teams, shape automation strategies, and ensure scalable, secure deployments. The role blends technical leadership with client advisory and delivery management in a dynamic security practice.

Qualifications

• Bachelor's degree in CS/SE/Cybersecurity or related field with 6–10 years of relevant experience.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on experience with enterprise SOAR platforms listed in the job description.
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of SOC processes including alert triage, incident response, threat detection, threat intel, and vulnerability management.
• Understanding of cloud platforms (Azure, AWS, GCP).

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment.
• Advise on automation strategy, governance, platform selection, and SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks that automate incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, vulnerability management, email security, network security, ticketing, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation.
• Facilitate executive briefings, architecture reviews, and requirements sessions; translate findings into plans.
• Manage engagement scope, workplans, risks, staffing, and delivery milestones while maintaining quality.
• Establish engineering standards, governance, testing, documentation, and production support for automation.
• Lead, coach, and develop multidisciplinary teams; foster inclusive, collaborative environments.
• Identify follow-on opportunities, assist with proposals and SOWs, and grow the security automation practice.
• Maintain awareness of threats, AI-assisted security ops, automation tech, and evolving SOAR platforms.

Skills

Leadership

SOAR

Security automation

Architecture design

Client advisory

Delivery management

Python/PowerShell

REST APIs

Cloud platforms

Stakeholder management

Education

Bachelor's degree in CS/SE/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

Swimlane

D3 Security

Google Security Operations

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions across SOC environments. You will drive end-to-end engagements, provide strategic direction, and oversee complex integrations with SIEM, IAM, and cloud security.

You will guide cross-functional teams, shape automation strategies, and ensure scalable, secure deployments. The role blends technical leadership with client advisory and delivery management in a dynamic security practice.