SOAR Engineering Manager: Lead Enterprise Security Automation

EY; City of Rochester (NY); On-site; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a SOAR Engineering Manager to lead automation strategy and delivery for enterprise clients across the United States. You will own end-to-end security automation initiatives, partner with SOC, incident response, and engineering teams, and guide complex SOAR programs to successful production deployments.

Drive architecture, governance, and best practices while mentoring multidisciplinary teams and ensuring measurable value from automation investments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field; 6–10 years in security automation or SOAR.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, etc.).
• Strong software development and scripting skills (Python, PowerShell, JavaScript).
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery to deployment and operation.
• Advise clients on automation strategy, governance, and platform selection.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Direct design and development of playbooks for incident triage, enrichment, investigation, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and collaboration platforms.

Skills

Leadership

Security operations

Client advisory

Delivery management

Team development

Architecture

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Job description

EY is seeking a SOAR Engineering Manager to lead automation strategy and delivery for enterprise clients across the United States. You will own end-to-end security automation initiatives, partner with SOC, incident response, and engineering teams, and guide complex SOAR programs to successful production deployments.

Drive architecture, governance, and best practices while mentoring multidisciplinary teams and ensuring measurable value from automation investments.