SOAR Engineering Manager - Security Automation

EY; San Mateo (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for clients across industries. You will guide architecture, playbook development, and cross-functional delivery with security operations and engineering partners.

This role requires hands-on SOAR experience, strong scripting skills, and the ability to manage complex engagements in a fast-paced consulting environment.

Qualifications

• Bachelor's degree and 6–10 years in security automation or SOAR
• Experience leading enterprise SOAR projects
• Hands-on with enterprise SOAR platforms (XSOAR, Splunk SOAR, etc.)
• Strong programming/scripting (Python, PowerShell, JS)
• REST APIs and integrations experience
• Knowledge of SOC processes and incident response

Responsibilities

• Lead end-to-end SOAR and security automation engagements.
• Advise on automation strategy, operating models, governance, and roadmaps.
• Own solution architecture and delivery quality for enterprise SOAR implementations.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, remediation, and reporting.
• Oversee integrations across SIEM, IAM, cloud security, threat intelligence, and more.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation.
• Facilitate architecture reviews and executive briefings; translate findings into actionable plans.
• Manage engagement scope, risks, and delivery milestones while ensuring client satisfaction.

Skills

Leadership

Security operations

SOAR engineering

Cloud security

Automation

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

Python

PowerShell

JavaScript

REST APIs

Custom Integrations

Job description

EY is seeking a SOAR Engineering Manager to lead design, delivery, and optimization of security automation solutions for clients across industries. You will guide architecture, playbook development, and cross-functional delivery with security operations and engineering partners.

This role requires hands-on SOAR experience, strong scripting skills, and the ability to manage complex engagements in a fast-paced consulting environment.