SOAR Service Lead – Cybersecurity Automation

About the role

PwC is hiring a SOAR Service Lead in Toronto for its cybersecurity advisory practice. The role covers the development and delivery of SOAR automation solutions for cybersecurity operations, with a focus on guiding and mentoring a team of specialists. It follows the departure of a valued team member and offers a hybrid work environment.

Key responsibilities

• Lead the development and delivery of SOAR automation solutions for cybersecurity operations
• Oversee the full lifecycle of SOAR playbooks, connectors and jobs, aligned with business and security objectives
• Champion the adoption and optimization of Chronicle SOAR and CI/CD methodologies
• Drive change management across IT and security teams
• Translate business needs into technical automation strategies with cross-functional stakeholders
• Guide and mentor a team of specialists
• Ensure compliance with regulatory and security standards in automation implementations

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field (required)
• Minimum 3 years of experience in SOAR, security automation or security operations
• Proven leadership experience managing technical teams or automation projects
• Experience in large organizations with complex change management processes
• Preferred: industry certifications such as CISSP, CISM or GIAC

Required skills

• Deep understanding of SOAR architecture, integration patterns and automation frameworks
• CI/CD pipeline management, DevOps practices and change management methodologies
• Security operations, incident response and threat intelligence
• Chronicle SOAR and Python scripting expertise

The salary range is $84,700 - $134,700, with possible variable incentive pay for eligible employees.