Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior Manager
EY · San Antonio, TX · 3 wk ago
HybridInformation Technology$205k–$426k/yrFull-time
We need to output HTML fragment with sections for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate. Must preserve all substantive info.
We need to parse the posting.
First paragraph: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." This is generic marketing; maybe part of About the role? Could be considered About the role. The posting has "The Opportunity" then description. Could treat that as About the role.
We need sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We have content: Responsibilities: "Your Key Responsibilities" list many bullet-like sentences. We'll extract each as .
Qualifications: "To Qualify for the Role, You Must Have:" list.
Skills: "Skills And Attributes For Success" list.
Ideally, You'll Also Have: maybe also skills? Could be part of Skills or Qualifications? Probably Skills.
What We Look For: maybe part of Skills? Could be considered Skills.
What We Offer You: includes benefits and salary range. So Benefits and Pay sections.
Schedule: Not mentioned. So we should not include Schedule section.
We must not create sections with placeholder text. So only include sections with real content.
Thus sections: About the role, Responsibilities, Requirements (maybe same as Qualifications?), Qualifications, Skills, Benefits, Pay.
But we have both Requirements and Qualifications; the posting has "To Qualify for the Role, You Must Have:" which is qualifications. There's also "Requirements" maybe not explicit separate. Could combine? The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have both Requirements and Qualifications if content distinct. The posting has "To Qualify for the Role, You Must Have:" which is qualifications. There's also maybe "Requirements" implied but not separate. Safer to have Qualifications only, and maybe Requirements omitted if no distinct content. However we have "Skills And Attributes For Success" which is skills. Also "What We Look For" maybe also skills but could be merged.
We need to preserve all substantive info; we can include both Skills and What We Look For under Skills section, or separate? The instruction: prefer a few substantive sections over many thin ones. So we could combine Skills and What We Look For into a single Skills section.
Similarly, Benefits and Pay: we have details about salary range and total rewards. So we can have Benefits (medical, dental, pension, 401k, PTO) and Pay (salary ranges). Could combine but better separate as they are distinct.
We must not include boilerplate like EEO etc. Remove those.
Now craft HTML.
Structure:
About the role
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. In a rapidly evolving cybersecurity landscape, organizations face increasingly sophisticated threats while managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. As a SOAR Engineering Senior Manager, you will lead complex security automation transformation programs and help shape the growth of our Security Operations and SOAR capabilities. You will serve as a trusted advisor to CISOs and senior security leaders, helping clients define automation strategies, target operating models, technology roadmaps, and investment priorities. You will provide strategic and technical leadership across enterprise SOAR programs, from strategy and architecture through implementation and operationalization. Working across Security Operations, Incident Response, Detection Engineering, Threat Intelligence, and broader technology teams, you will help clients transform how security operations are delivered at scale.
Then Responsibilities:Responsibilities
- Lead a portfolio of complex SOAR and security automation engagements, providing strategic and technical oversight from discovery and architecture through implementation, deployment, and operationalization.
- Serve as a trusted advisor to CISOs and senior security leaders, translating security operations challenges into automation strategies, target operating models, capability roadmaps, and investment priorities.
- Define and drive enterprise security automation strategies, including use-case portfolios, prioritization frameworks, platform strategy, governance, operating models, and adoption roadmaps.
- Provide architecture and engineering oversight for enterprise SOAR solutions, ensuring designs are scalable, secure, resilient, maintainable, and aligned with client requirements and technology strategies.
- Oversee automation across incident triage, enrichment, investigation, containment, remediation, threat intelligence, detection engineering, case management, and reporting, including integrations with SIEM, EDR/XDR, and other security platforms.
- Lead executive briefings, architecture reviews, technical workshops, and strategic planning sessions, translating complex technical and operational issues into clear recommendations and executive decision points.
- Own engagement performance across scope, financials, staffing, milestones, risks, dependencies, delivery quality, and client satisfaction, while ensuring successful outcomes across concurrent workstreams.
- Build and maintain senior client relationships, identify emerging client needs, and shape opportunities to expand engagements across security automation and broader Security Operations capabilities.
- Lead and contribute to business development activities, including solution shaping, proposals, statements of work, estimates, client presentations, and pursuit activities.
- Develop and evolve SOAR service offerings, methodologies, reusable frameworks, accelerators, reference architectures, and engineering standards that enable consistent delivery and support practice growth.
- Lead, coach, and develop Managers, Senior Consultants, engineers, and multidisciplinary teams, providing technical direction, performance feedback, mentorship, and career development.
- Drive innovation across Security Operations by evaluating and operationalizing AI-assisted security, generative AI, advanced orchestration, cloud-native automation, and emerging technologies, with appropriate governance and controls.
Qualifications
- A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field and significant relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline.
- Demonstrated experience leading enterprise-scale security automation or SOAR transformation programs and providing oversight across multiple workstreams or engagements.
- Experience with enterprise SOAR and security automation technologies such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable platforms.
- Strong understanding of software development and scripting concepts using Python, PowerShell, JavaScript, or other automation-focused languages, with the technical depth necessary to guide engineering teams and review solution approaches.
- Experience designing and consuming REST APIs, web services, SDKs, custom integrations, and reusable automation frameworks.
- Deep knowledge of SOC processes including alert triage, incident response, threat detection, threat intelligence, vulnerability management, case management, and security operations governance.
- Experience integrating security capabilities across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intelligence, ticketing, and collaboration platforms.
- Understanding of enterprise infrastructure, networking, operating systems, and major cloud platforms including Microsoft Azure, AWS, and Google Cloud.
- Experience leading client-facing consulting engagements, managing delivery and financial risks, and communicating complex recommendations to senior and executive stakeholders.
- Demonstrated experience contributing to business development, proposals, solution shaping, client presentations, and expansion of existing client relationships.
under Skills? But we already have list; we could add a
summarizing. However instruction: use
for prose. So we can add a
after the list. Thus Skills section:
Skills
-
...list items...
We seek experienced cybersecurity leaders who combine technical credibility, strategic thinking, commercial acumen, and people leadership. Successful Senior Managers can move comfortably between executive conversations about security transformation and investment priorities and detailed discussions with engineering teams about architecture, integrations, automation, and operational challenges. You will be expected not only to deliver successful client outcomes, but also to grow trusted client relationships, develop our people, shape new solutions, and contribute to the continued growth of the Security Operations and automation practice.
Now Benefits: From "What We Offer You": "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a