GDS Cyber - Frontier AI Layered Defense Detection and Response - Manager

At EY, youll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. CDR - Manager Agentic AI SOC Transformation Experience: 812 Years Role Overview As a Manager in Agentic AI SOC Transformation, you will lead enterprise clients in evolving their traditional SOC into an intelligent, AI-driven, agent-enabled security operations model. This role combines SOC strategy, platform engineering, and applied AI leadership, with a strong focus on designing and operationalizing agentic AI use cases across SIEM, SOAR, and XDR ecosystems. You will oversee end-to-end transformation programsspanning assessment, architecture, implementation, and optimizationwhile managing client stakeholders and internal delivery teams. You will play a critical role in bridging cybersecurity operations and AI innovation, ensuring solutions are practical, scalable, and aligned to real-world SOC challenges. Key Responsibilities Client Engagement & Transformation LeadershipLead SOC transformation programs with a focus on Agentic AI adoptionDefine target operating models for AI-enabled SOCs (people, process, technology)Conduct maturity assessments and develop transformation roadmapsEngage with client leadership (CISOs, SOC heads) to align on strategy, value, and outcomes Solution Architecture & DeliveryArchitect agentic AI-driven SOC solutions integrating SIEM, SOAR, XDR, and AI platformsDesign and oversee implementation of AI agents for SOC use cases, such as:Alert triage and prioritizationInvestigation copilots and enrichmentIncident summarization and reportingAutomated response orchestrationEnsure integration of LLMs, RAG pipelines, and contextual data sources into SOC workflowsGuide teams on platform deployment, migration, and optimization initiativesAI-Driven SOC InnovationIdentify and implement high-impact AI use cases to improve SOC efficiency and detection qualityDrive adoption of agentic workflows and multi-agent orchestration patternsEstablish best practices for prompt engineering, context management, and AI governanceBalance AI automation with analyst decision-making for effective outcomes Team Leadership & Delivery ManagementLead cross-functional teams of SOC engineers, detection engineers, and AI specialistsProvide technical guidance and mentorship on AI-integrated SOC workflowsEnsure high-quality delivery across projects, including timelines, documentation, and outcomesSupport capability building and internal knowledge development in Agentic AI security Stakeholder Communication & Thought LeadershipLead client workshops, demos, and executive presentationsTranslate technical concepts into business outcomes and ROI-driven narrativesContribute to thought leadership, solution accelerators, and reusable frameworks Required Skills & Experience 812 years in Cybersecurity / SOC Engineering / Detection & Response, with leadership experienceStrong expertise in SIEM, SOAR, and XDR platforms (e.g., Microsoft Sentinel/Defender, CrowdStrike, Splunk)Proven experience in SOC transformations, platform implementations, or large-scale deploymentsHands-on or applied understanding of AI/LLM use cases in cybersecurityExperience integrating automation, APIs, and orchestration workflows in SOC environmentsStrong understanding of threat detection, incident response, and MITRE ATT&CK frameworkAbility to manage client stakeholders and drive strategic conversations Preferred / Good-to-Have Experience with agentic AI frameworks (e.g., LangChain, Semantic Kernel, AutoGen, etc.)Exposure to Azure OpenAI, AI platforms, or cloud-native AI servicesUnderstanding of RAG architectures, embeddings, and semantic searchExperience designing AI copilots or automation solutions for SOC operationsExposure to DevSecOps, cloud security, or modern security architectures EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. .