SOAR Engineering Manager: Lead Security Automation

EY; Orlando (FL); Hybrid; USD 150,000 - 290,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for diverse clients. You will guide teams across security operations, incident response, threat detection, and engineering to drive measurable value from cybersecurity investments.

The role requires deep SOC knowledge, strong leadership, and a track record of delivering scalable automation in large enterprises.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field and 6–10 years in security automation or SOAR engineering.
• Experience leading teams delivering security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Sentinel, Splunk SOAR, Swimlane, etc.).
• Strong software development and scripting in Python/PowerShell/JavaScript.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of SOC processes: alert triage, incident response, threat detection, threat intel, vulnerability management, case management.
• Experience integrating security technologies across SIEM/EDR/XDR, IAM, cloud, email, network, ticketing, and collaboration tools.
• Understanding of infrastructure, networking, OS, and major cloud platforms (Azure, AWS, GCP).
• Ability to lead client-facing engagements and manage delivery risk.

Responsibilities

• Lead end-to-end SOAR and security automation engagements from discovery through deployment and transition.
• Advise clients on automation strategy, operating models, governance, and platform roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intel, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, and reusable frameworks.
• Lead architecture reviews, workshops, and stakeholder interviews; translate findings into clear recommendations.

Skills

Leadership

Security operations

Architecture

Client advisory

Python scripting

Stakeholder communication

Education

Bachelor's degree in CS or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for diverse clients. You will guide teams across security operations, incident response, threat detection, and engineering to drive measurable value from cybersecurity investments.

The role requires deep SOC knowledge, strong leadership, and a track record of delivering scalable automation in large enterprises.