SOAR Engineering Manager: Security Automation Leader

Ernst & Young Oman; Charlotte (NC); Remote; USD 145,000 - 302,000; Full time

Job summary

EY is hiring a SOAR Engineering Manager to lead security automation initiatives across client environments. You will drive architecture, playbook development, and platform integrations to enhance incident response and SOC effectiveness.

Responsibilities include client advisory, solution governance, and managing multi-disciplinary teams to deliver measurable value, while promoting best practices in automation and security operations.

Qualifications

• Bachelor's degree in a relevant field and 6–10 years of experience in security automation, SOAR engineering, or related disciplines.
• Experience leading teams responsible for designing and delivering security automation in enterprise environments.
• Hands-on experience with enterprise SOAR platforms (as listed) and strong scripting in Python, PowerShell, or JavaScript.

Responsibilities

• Lead end-to-end SOAR engagements from discovery through deployment and transition.
• Advise clients on automation strategy, governance, roadmaps, and SOC effectiveness.
• Own solution architecture and ensure scalable, secure, maintainable designs.
• Design and develop playbooks for incident triage, enrichment, investigation, containment, and reporting.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms.
• Provide technical oversight for custom integrations, APIs, connectors, and cloud-native automation.
• Facilitate executive briefings, architecture reviews, and stakeholder interviews; translate findings into actions.
• Manage scope, milestones, risks, staffing, and delivery quality; ensure client satisfaction.
• Establish engineering standards, testing practices, and production support models for automation.

Skills

Leadership

Security Operations

SOAR engineering

Python

REST APIs

CI/CD

Cloud platforms

Client engagement

Architecture design

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Security Operations

Tines

D3 Security

Swimlane

Job description

EY is hiring a SOAR Engineering Manager to lead security automation initiatives across client environments. You will drive architecture, playbook development, and platform integrations to enhance incident response and SOC effectiveness.

Responsibilities include client advisory, solution governance, and managing multi-disciplinary teams to deliver measurable value, while promoting best practices in automation and security operations.