SOAR Engineering Manager - Security Automation & Response

EY; McLean (VA); Remoto; USD 145.000 - 302.000; Tempo integral

Resumo da vaga

EY is seeking an experienced SOAR Engineering Manager in the United States to lead the design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, implementation, and governance while coordinating with security operations and engineering teams.

In this role, you will manage multi-stakeholder engagements, drive playbook development, and ensure scalable, secure deliverables.

Qualificações

• A bachelor's degree in Computer Science, Cybersecurity, or a related field plus 6–10 years of relevant experience.
• Experience leading teams responsible for design and delivery of security automation or SOAR solutions in enterprise environments.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable technologies.
• Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience designing and consuming REST APIs, web services, SDKs, and custom integrations.
• Strong knowledge of SOC processes including alert triage, incident response, threat detection, threat intelligence, vulnerability management, and case management.

Responsabilidades

• Lead end-to-end SOAR and security automation engagements, from discovery and strategy through architecture, implementation, testing, deployment, and operational transition.
• Advise clients on automation strategy, operating models, governance, platform selection, capability roadmaps, and opportunities to improve SOC effectiveness.
• Own solution architecture and delivery quality for enterprise SOAR implementations, ensuring scalable, secure, maintainable designs aligned with client requirements.
• Direct the design and development of playbooks that automate incident triage, enrichment, investigation, containment, remediation, case management, and reporting activities.
• Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, vulnerability management, email security, network security, ticketing, and collaboration platforms.
• Provide technical oversight for custom integrations, APIs, connectors, reusable frameworks, and cloud-native automation capabilities.
• Facilitate executive briefings, architecture reviews, technical workshops, stakeholder interviews, and requirements sessions; translate findings into recommendations and implementation plans.
• Manage engagement scope, workplans, risks, dependencies, staffing, financial performance, and delivery milestones while maintaining service quality and client satisfaction.
• Establish engineering standards, governance controls, testing practices, documentation expectations, and production support models for automation solutions.
• Lead, coach, and develop multidisciplinary teams; review work products, provide actionable feedback, and foster inclusive collaboration.
• Identify follow-on opportunities, contribute to proposals, support solution development, and grow the security automation practice.
• Maintain awareness of emerging threats, AI-assisted security operations, automation technologies, cloud-native security capabilities, and evolving SOAR platforms.

Conhecimentos

Leadership

Security Operations

Automation experience

Client advisory

Architecture design

Python/PowerShell/JavaScript

APIs & integrations

Project delivery

Formação

Bachelor's degree in CS/Cybersecurity

Related field degree

Ferramentas

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Tines

D3 Security

Swimlane

REST APIs

Descrição da vaga

EY is seeking an experienced SOAR Engineering Manager in the United States to lead the design, delivery, and optimization of security automation solutions across client environments. You will guide architecture, implementation, and governance while coordinating with security operations and engineering teams.

In this role, you will manage multi-stakeholder engagements, drive playbook development, and ensure scalable, secure deliverables.