Join EY and build a career that’s as unique as you are, leveraging our global scale, supportive culture, and advanced technology. We are seeking a Manager to lead the transformation of traditional Security Operations Centers (SOCs) into intelligent, AI-driven, agent-enabled environments. This pivotal role blends SOC strategy, platform engineering, and applied AI leadership.

Focusing on designing and operationalizing agentic AI use cases across SIEM, SOAR, and XDR, you will manage end-to-end transformation programs. This includes assessment, architecture, implementation, and optimization, while effectively managing client stakeholders and internal delivery teams. You will be instrumental in bridging cybersecurity operations with AI innovation, ensuring solutions are practical, scalable, and directly address real-world SOC challenges.

Lead enterprise clients through SOC transformation initiatives with a strong emphasis on Agentic AI adoption. Define future-state operating models for AI-enabled SOCs, encompassing people, process, and technology. Conduct thorough maturity assessments and develop strategic transformation roadmaps.

Engage with senior client leadership, including CISOs and SOC heads, to align on strategic direction, demonstrate value, and achieve desired outcomes. Architect agentic AI-driven SOC solutions, integrating SIEM, SOAR, XDR, and advanced AI platforms. Design and oversee the implementation of AI agents for critical SOC use cases like alert triage, investigation copilots, incident summarization, and automated response orchestration.

Drive the adoption of agentic workflows and multi-agent orchestration patterns, establishing best practices for prompt engineering, context management, and AI governance. Lead cross-functional teams comprising SOC engineers, detection engineers, and AI specialists, providing technical guidance and mentorship. Ensure high-quality project delivery, managing timelines, documentation, and outcomes, while fostering internal knowledge development in Agentic AI security.

A minimum of 8 to 12 years of experience in Cybersecurity, SOC Engineering, or Detection & Response, including proven leadership experience, is essential. Demonstrable expertise in SIEM, SOAR, and XDR platforms such as Microsoft Sentinel/Defender, CrowdStrike, or Splunk is required.

Candidates should possess significant experience in SOC transformations, platform implementations, or large-scale security deployments. A hands-on or applied understanding of AI and LLM use cases within the cybersecurity domain is crucial. Experience integrating automation, APIs, and orchestration workflows within SOC environments, alongside a strong grasp of threat detection, incident response principles, and the MITRE ATT&CK framework, is necessary.

Candidates must be adept at managing client stakeholders and leading strategic discussions. Preferred qualifications include experience with agentic AI frameworks like LangChain, Semantic Kernel, or AutoGen, exposure to Azure OpenAI or other AI platforms, and an understanding of RAG architectures. Familiarity with DevSecOps, cloud security, or modern security architectures is also advantageous.