SOAR Engineering Manager — Cyber Automation Leader

EY; New Orleans (LA); On-site; USD 150,000 - 290,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Job summary

EY is seeking a SOAR Engineering Manager to lead security automation initiatives across diverse client environments. You will guide architecture, ensure scalable designs, and oversee end-to-end delivery from discovery to operation—working with SIEM, EDR/XDR, IAM, and cloud security teams.

The role emphasizes leadership, client advisory skills, and deep experience in security operations, incident response, and automation frameworks.

Qualifications

• Bachelor's degree in a related field and 6–10 years of experience in security automation or SOAR engineering.
• Experience leading teams delivering security automation in enterprise environments.
• Hands-on with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, or equivalents.
• Strong software development and scripting experience (Python, PowerShell, JavaScript).
• Experience designing and consuming REST APIs and custom integrations.

Responsibilities

• Lead end-to-end SOAR engagements from strategy through deployment and operational transition.
• Advise on automation strategy, governance, roadmaps, and SOC improvement opportunities.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct the design of playbooks for incident triage, enrichment, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration platforms.

Skills

Leadership

Security operations

Automation strategy

Executive communication

Education

Bachelor's degree

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead security automation initiatives across diverse client environments. You will guide architecture, ensure scalable designs, and oversee end-to-end delivery from discovery to operation—working with SIEM, EDR/XDR, IAM, and cloud security teams.

The role emphasizes leadership, client advisory skills, and deep experience in security operations, incident response, and automation frameworks.