GDS Cyber Frontier AI Layered Defense Detection and Response Manager

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

CDR - Manager Agentic AI SOC Transformation

Experience: 812 Years

Role Overview

As a Manager in Agentic AI SOC Transformation you will lead enterprise clients in evolving their traditional SOC into an intelligent AI-driven agent-enabled security operations model.

This role combines SOC strategy platform engineering and applied AI leadership with a strong focus on designing and operationalizing agentic AI use cases across SIEM SOAR and XDR ecosystems. You will oversee end-to-end transformation programsspanning assessment architecture implementation and optimizationwhile managing client stakeholders and internal delivery teams.

You will play a critical role in bridging cybersecurity operations and AI innovation ensuring solutions are practical scalable and aligned to real-world SOC challenges.

Key Responsibilities

• Client Engagement & Transformation Leadership
  • Lead SOC transformation programs with a focus on Agentic AI adoption
  • Define target operating models for AI-enabled SOCs (people process technology)
  • Conduct maturity assessments and develop transformation roadmaps
  • Engage with client leadership (CISOs SOC heads) to align on strategy value and outcomes

• Solution Architecture & Delivery
  • Architect agentic AI-driven SOC solutions integrating SIEM SOAR XDR and AI platforms
  • Design and oversee implementation of AI agents for SOC use cases such as:
    • Alert triage and prioritization
    • Investigation copilots and enrichment
    • Incident summarization and reporting
    • Automated response orchestration
  • Ensure integration of LLMs RAG pipelines and contextual data sources into SOC workflows
  • Guide teams on platform deployment migration and optimization initiatives

• AI-Driven SOC Innovation
  • Identify and implement high-impact AI use cases to improve SOC efficiency and detection quality
  • Drive adoption of agentic workflows and multi-agent orchestration patterns
  • Establish best practices for prompt engineering context management and AI governance
  • Balance AI automation with analyst decision-making for effective outcomes

• Team Leadership & Delivery Management
  • Lead cross-functional teams of SOC engineers detection engineers and AI specialists
  • Provide technical guidance and mentorship on AI-integrated SOC workflows
  • Ensure high-quality delivery across projects including timelines documentation and outcomes
  • Support capability building and internal knowledge development in Agentic AI security

• Stakeholder Communication & Thought Leadership
  • Lead client workshops demos and executive presentations
  • Translate technical concepts into business outcomes and ROI-driven narratives
  • Contribute to thought leadership solution accelerators and reusable frameworks

Required Skills & Experience

• 812 years in Cybersecurity / SOC Engineering / Detection & Response with leadership experience
• Strong expertise in SIEM SOAR and XDR platforms (e.g. Microsoft Sentinel/Defender CrowdStrike Splunk)
• Proven experience in SOC transformations platform implementations or large-scale deployments
• Hands-on or applied understanding of AI/LLM use cases in cybersecurity
• Experience integrating automation APIs and orchestration workflows in SOC environments
• Strong understanding of threat detection incident response and MITRE ATT&CK framework
• Ability to manage client stakeholders and drive strategic conversations

Preferred / Good-to-Have

• Experience with agentic AI frameworks (e.g. LangChain Semantic Kernel AutoGen etc.)
• Exposure to Azure OpenAI AI platforms or cloud-native AI services
• Understanding of RAG architectures embeddings and semantic search
• Experience designing AI copilots or automation solutions for SOC operations
• Exposure to DevSecOps cloud security or modern security architectures

EY Building a better working world

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.