SOAR Engineering Manager: Cybersecurity Automation Leader

EY; Toledo (OH); Remote; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY seeks an experienced SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide cross-functional teams, engage clients, and shape automation strategies across SOC and security operations.

You will oversee playbook development, API integrations, and platform implementations, ensuring scalable, secure solutions that drive measurable value for clients.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity or related field and 6–10 years of relevant experience.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane or comparable technologies.
• Strong software development and scripting: Python, PowerShell, JavaScript or equivalent.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of SOC processes: alert triage, incident response, threat detection, vulnerability management, case management.
• Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intel, ticketing and collaboration platforms.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery through implementation and operational transition.
• Advise clients on automation strategy, governance, platform selection, and capability roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct the design and development of playbooks to automate incident triage, investigation, containment and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation capabilities.
• Facilitate executive briefings, architecture reviews, and workshops; translate findings into actionable plans.
• Manage engagement scope, staffing, risks, milestones, and client satisfaction.

Skills

Security operations

SOAR platforms

Leadership

Client advisory

Python scripting

REST APIs

Cloud platforms

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks an experienced SOAR Engineering Manager to lead the design, delivery, and optimization of security automation solutions. You will guide cross-functional teams, engage clients, and shape automation strategies across SOC and security operations.

You will oversee playbook development, API integrations, and platform implementations, ensuring scalable, secure solutions that drive measurable value for clients.