SOAR Engineering Manager — Elevate Cyber Automation

Ernst & Young Oman; Buffalo (NY); Remote; USD 145,000 - 266,000; Full time

Job summary

EY seeks a SOAR Engineering Manager to lead security automation initiatives across client engagements, guiding architecture, delivery, and playbook development. You will drive scalable, secure automation solutions in collaboration with security operations, incident response, threat detection, and engineering teams.

You will manage multidisciplinary teams, oversee API integrations, governance, and architecture reviews, while maintaining strong relationships with executive stakeholders and

Qualifications

• A bachelor's degree in CS/CS Engineering or related field and 6–10 years of relevant experience.
• Experience leading teams delivering security automation or SOAR in enterprise environments.
• Hands-on with enterprise SOAR platforms such as Cortex XSOAR, Splunk SOAR, or comparable.
• Strong scripting in Python/PowerShell/JavaScript; REST APIs & integrations experience.

Responsibilities

• Lead end-to-end SOAR engagements from strategy through deployment and transition.
• Advise on automation strategy, governance, and SOC effectiveness improvements.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks for incident triage, investigation, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration tools.
• Provide technical oversight for custom integrations and reusable automation frameworks.

Skills

Leadership

Strategic thinking

Executive communication

Client advisory

Team development

Education

Bachelor's degree in CS/CS Engineering or related field

Tools

Cortex XSOAR

Splunk SOAR

Microsoft Sentinel

Tines

Swimlane

APIs & Integrations

Job description

EY seeks a SOAR Engineering Manager to lead security automation initiatives across client engagements, guiding architecture, delivery, and playbook development. You will drive scalable, secure automation solutions in collaboration with security operations, incident response, threat detection, and engineering teams.

You will manage multidisciplinary teams, oversee API integrations, governance, and architecture reviews, while maintaining strong relationships with executive stakeholders and