SOAR Engineering Manager: Lead Security Automation

Ernst & Young Oman; Lansing (MI); On-site; USD 150,000 - 260,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead security automation initiatives across clients, guiding architecture, delivery, and playbook development. You will coordinate with security operations, incident response, and engineering teams to drive scalable, secure automation solutions.

You will oversee end-to-end engagements, advise on governance and platform choices, and mentor a multidisciplinary team to deliver measurable value from automation investments across diverse environments.

Qualifications

• Bachelor's degree in a related field and 6–10 years in security automation or SOAR.
• Experience leading teams delivering enterprise SOAR projects.
• Hands-on with enterprise SOAR platforms listed in the job ad.
• Strong development and scripting in Python, PowerShell, or JavaScript.
• Experience designing REST APIs, web services, SDKs, and integrations.
• Deep knowledge of SOC processes and incident response workflows.

Responsibilities

• Lead end-to-end SOAR engagements from discovery to operational transition.
• Advise on automation strategy, governance, and roadmaps for SOC effectiveness.
• Own architecture and delivery quality for enterprise SOAR implementations.
• Direct design of playbooks for triage, enrichment, investigation, and remediation.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and more.
• Provide oversight for custom integrations, APIs, and reusable frameworks.
• Facilitate executive briefings, architecture reviews, and stakeholder sessions.
• Manage scope, workplans, risks, staffing, and delivery milestones.
• Establish engineering standards, testing, and production support models.
• Lead, coach, and develop multidisciplinary teams with inclusive culture.
• Identify follow-on opportunities and support proposals and SOWs.
• Maintain awareness of evolving threats and automation technologies.

Skills

SOAR platforms

Python scripting

PowerShell

JavaScript

Security operations

APIs & integrations

Education

Bachelor's degree in CS/CE/Cybersecurity/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Swimlane

D3 Security

Tines

Google Security Operations

Job description

EY is seeking a SOAR Engineering Manager to lead security automation initiatives across clients, guiding architecture, delivery, and playbook development. You will coordinate with security operations, incident response, and engineering teams to drive scalable, secure automation solutions.

You will oversee end-to-end engagements, advise on governance and platform choices, and mentor a multidisciplinary team to deliver measurable value from automation investments across diverse environments.