Jobs · Arizona

Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Manager - Consulting

EY · Phoenix, AZ · 1 mo ago
Hybrid$174k–$290k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes location line, then intro paragraphs. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. We need to preserve all substantive information. Let's parse content: Location: Anywhere in Country (maybe irrelevant). At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity ... (description). Then "Your Key Responsibilities" list bullet points. Then "Skills And Attributes For Success" bullet points. Then "To Qualify for the Role, You Must Have" bullet points. Then "Ideally, You'll Also Have" bullet points. Then "What We Look For" paragraph. Then "What We Offer You At EY" paragraph includes salary ranges and benefits. Then "Are you ready..." etc (application instructions) which we should remove. Also EEO etc at end. We need sections: About the role (maybe the intro paragraphs before responsibilities). Responsibilities (Your Key Responsibilities). Requirements? The posting has "To Qualify for the Role, You Must Have" which is qualifications. Also "Ideally, You'll Also Have" could be additional qualifications or preferred qualifications. Could combine into Requirements/Qualifications. Skills: "Skills And Attributes For Success". Benefits: "What We Offer You At EY" includes benefits and salary. Pay: salary ranges. Schedule: not mentioned. So we should not include Schedule section. We need to avoid filler like "commensurate with experience". Not present. We need to output HTML fragment only. Structure: maybe:

About the role

... intro paragraphs ...

Responsibilities

  • ... each bullet ...

Qualifications

  • ... from To Qualify ...
Maybe also a separate

Preferred Qualifications

but not in list of allowed headings; we have Skills, Requirements, Qualifications. We could put "Ideally, You'll Also Have" under Qualifications as well, or maybe under Skills? Better to keep Qualifications covering both required and preferred, but we could split into two
    with headings? Not allowed extra headings. Could combine into one list with both required and preferred items, but we might lose distinction. However we must preserve all substantive information; we can include both sets in same list, maybe with a note? But we cannot add extra headings. Could include a

    before list describing required vs preferred. That's okay. Skills section:

    Skills

    with list from Skills And Attributes For Success. Benefits:

    Benefits

    with list from What We Offer You At EY (medical/dental, pension/401k, paid time off). Also maybe mention professional growth etc. Pay:

    Pay

    with salary ranges. We must not include Schedule. We need to ensure we don't include boilerplate like "Learn more at ey.com/us/careers." That's part of What We Offer? Actually it's after that sentence. Might be considered boilerplate but it's a link to careers; maybe keep? It's not EEO etc. It's part of the offer description. Could keep as part of paragraph. We must remove application instructions: "Are you ready to shape your future with confidence? Apply today. To make the most of your application experience, please limit yourself to two applications within a six-month period.EY accepts applications for this position on an on-going basis.For those living in California, please click here for additional information.At EY, our values set the foundation..." etc. Also the EEO statement at end. Remove those. Also remove duplicated lines: maybe none. Now craft HTML. Let's extract intro paragraphs: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity In a rapidly evolving cybersecurity landscape, organizations face increasingly sophisticated threats while managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a SOAR Engineering Manager, where you will lead the design, delivery, and optimization of security automation solutions that help organizations respond to threats faster and more effectively. You will combine technical leadership, client advisory, delivery management, and team development to guide complex SOAR initiatives. Working with security operations, incident response, threat detection, engineering, and business stakeholders, you will shape automation strategies, oversee platform implementations, and help clients realize measurable value from their cybersecurity investments." We can combine into a paragraph. Now responsibilities list (bullet points). Let's capture each: - Lead end-to-end SOAR and security automation engagements, from discovery and strategy through architecture, implementation, testing, deployment, and operational transition. - Advise clients on automation strategy, operating models, governance, platform selection, capability roadmaps, and opportunities to improve Security Operations Center (SOC) effectiveness. - Own solution architecture and delivery quality for enterprise SOAR implementations, ensuring designs are scalable, secure, maintainable, and aligned with client requirements. - Direct the design and development of playbooks that automate incident triage, enrichment, investigation, containment, remediation, case management, and reporting activities. - Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, vulnerability management, email security, network security, ticketing, and collaboration platforms. - Provide technical oversight for custom integrations, APIs, connectors, reusable frameworks, and cloud-native automation capabilities. - Facilitate executive briefings, architecture reviews, technical workshops, stakeholder interviews, and requirements sessions; translate complex findings into clear recommendations and implementation plans. - Manage engagement scope, workplans, risks, dependencies, staffing, financial performance, and delivery milestones while maintaining service quality and client satisfaction. - Establish engineering standards, governance controls, testing practices, documentation expectations, and production support models for automation solutions. - Lead, coach, and develop multidisciplinary teams; review work products, provide actionable feedback, and create an inclusive, collaborative environment. - Identify follow-on opportunities, contribute to proposals and statements of work, support solution development, and help grow the security automation practice. - Maintain awareness of emerging threats, AI-assisted security operations, automation technologies, cloud-native security capabilities, and evolving SOAR platforms. Now Skills And Attributes For Success list: - Strong leadership, structured problem-solving, and critical-thinking skills, with the ability to make sound decisions in complex client environments. - Deep knowledge of security operations and demonstrated ability to connect business objectives, operating processes, and technical architecture. - Ability to lead concurrent workstreams, manage ambiguity, prioritize effectively, and drive accountability across cross-functional teams. - Executive presence and strong written and verbal communication skills, including the ability to influence technical and non-technical stakeholders. - Demonstrated ability to design scalable integrations and automation solutions across complex enterprise environments. - Experience developing high-quality client deliverables, architecture documents, roadmaps, reports, proposals, and presentations. - Commercial awareness, including scope management, estimation, resource planning, risk management, and engagement economics. - Commitment to quality, continuous improvement, mentorship, and inclusive team leadership. Now To Qualify for the Role, You Must Have list: - A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, and 6-10 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. - Experience leading teams or workstreams responsible for the design and delivery of security automation or SOAR solutions in enterprise environments. - Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable technologies. - Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages. - Experience designing and consuming REST APIs, web services, SDKs, and custom integrations. - Strong knowledge of SOC processes, including alert triage, incident response, threat detection, threat intelligence, vulnerability management, and case management. - Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intelligence, ticketing, and collaboration platforms. - Understanding of infrastructure, networking, operating systems, and major cloud platforms, including Microsoft Azure, Amazon Web Services, and Google Cloud Platform. - Experience designing, testing, troubleshooting, operationalizing, and governing automation workflows in production environments. - Knowledge of secure development practices, version control, testing methodologies, CI/CD concepts, and software engineering standards. - Ability to lead client-facing engagements, manage delivery risks, and communicate recommendations to senior stakeholders. - Relevant industry or platform certifications, or the ability to obtain an applicable certification after employment. Now Ideally, You'll Also Have list: - Experience architecting enterprise-scale SOAR implementations and establishing security automation programs or centers of enablement. - Experience developing reusable automation frameworks, advanced orchestration solutions, and platform governance standards. - Familiarity with Infrastructure as Code technologies such as Terraform, ARM templates, Bicep, or CloudFormation. - Experience with DevSecOps, CI/CD pipelines, cloud-native automation, containers, and serverless technologies. - Experience defining automation use-case portfolios, prioritization criteria, value metrics, and adoption roadmaps. - Ability to translate operational requirements into target-state architectures, implementation roadmaps, estimates, and business cases. - Experience with consulting engagement methodologies, proposal development, statements of work, and executive-level presentations. - Familiarity with AI-assisted security operations, generative AI use cases, and responsible automation controls. Now What We Look For paragraph: "We seek experienced leaders with a passion for cybersecurity engineering and automation, along with a record of delivering complex technical solutions and trusted client outcomes. Ideal candidates demonstrate strong judgment, learning agility, technical credibility, and the ability to lead diverse teams in a fast-paced consulting environment. We value professionals who can connect strategy to execution, improve security operations through automation, and help clients strengthen cyber resilience through modern engineering practices." Now What We Offer You At EY paragraph: "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100 Bay Area California offices – $181,200 to $302,100 All other offices locations in the US, including Sacramento – $144,900 to $265,800 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We need to separate Pay and Benefits. Pay: salary ranges. Benefits: medical/dental, pension/401k, paid time off, professional growth, personal fulfillment, inclusive culture, learn more link maybe. We should not include the "Learn more at ey.com/us/careers." as part of Benefits? Could keep as a link in a paragraph. We need to avoid duplication: The salary range appears three times; we can combine

Similar jobs