Consulting_Cyber Detection And Response SOAR Senior

EY; Philippines; On-site; PHP 1,000,000 - 1,400,000; Full time

Benefits offered by this job

Health and wellness packages

Rewards and recognition

Learning opportunities

Job summary

EY Philippines is seeking a SIEM SOAR/Platform Engineer to design, build, and maintain next-generation SIEM and SOAR platforms. You will work with Microsoft Sentinel, XSOAR, Defender suite, and other tools to enable scalable, automated security operations.

You will collaborate with Threat Detection, Threat Intelligence, and Incident Response teams to ensure seamless integration and visibility across EY’s global security ecosystem.

Qualifications

• Experience with other SOAR platforms and SIEM tools.
• Certifications such as CISSP, CEH, or Palo Alto Networks certifications.
• Knowledge of cloud security services and environments (AWS, Azure, GCP).

Responsibilities

• Automation Development: design, develop, and maintain security automation playbooks using XSOAR.
• Integration: integrate security tools with XSOAR to enhance incident response.
• Incident Response: collaborate with SOC to automate and streamline responses.
• Custom Scripting: develop scripts and integrations using Python.
• Monitoring and Optimization: optimize XSOAR playbooks and integrations for performance.
• Documentation: create and maintain documentation for automation processes.
• Training: provide training to SOC analysts on XSOAR workflows.
• Leadership: oversee task execution and resource management as needed.
• Team management: allocate personnel and evaluate performance to meet goals.

Skills

XSOAR

Python scripting

SIEM tools

Microsoft Sentinel

Cloud security

Tools

Defender suite

Palo Alto Cortex XSOAR

Job description

Job Description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Service line: Cyber Security - Position Title: SIEM SOAR/Platform Engineer

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. About Global Delivery Services Global Delivery Services refers to EY’s worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda. Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom. Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service. Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services. Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

This is an exciting opportunity to be part of EY’s global Cyber Defense and Security Operations function, where you will play a key role in designing, engineering, and maintaining next-generation SIEM and SOAR platforms that underpin our global detection and response capabilities.

As a SIEM SOAR/Platform Engineer, you’ll work with advanced technologies such as Microsoft Sentinel, XSOAR, Defender suite, and other threat management tools to build scalable, automated, and resilient cybersecurity infrastructure. You’ll collaborate closely with Threat Detection & Response (TDR), Threat Intelligence, and Incident Response teams to ensure optimal integration, visibility, and performance across the global security ecosystem.

This role offers the chance to influence platform architecture, optimize operational efficiency, and drive automation initiatives that enhance EY’s global cyber defense posture. You’ll be a part of a highly skilled, innovative team that continuously pushes the boundaries of what’s possible in modern security engineering - safeguarding EY and its clients against evolving digital threats.

Your Key Responsibilities

• Automation Development: Design, develop, and maintain security automation playbooks using XSOAR.
• Integration: Integrate various security tools and systems with XSOAR to enhance incident response capabilities.
• Incident Response: Collaborate with the SOC team to automate and streamline incident response processes.
• Custom Scripting: Develop custom scripts and integrations using Python or other relevant programming languages.
• Monitoring and Optimization: Continuously monitor and optimize XSOAR playbooks and integrations for performance and effectiveness.
• Documentation: Create and maintain comprehensive documentation for all automation processes and playbooks.
• Training: Provide training and support to SOC analysts on the use of XSOAR and automated workflows.
• Responsible for decision-making, optimizing processes, resource management, and overseeing team management as needed for task execution.
• Accountable for allocating personnel, supervising team members, assigning tasks, ensuring that the team has the necessary tools and support to succeed in their roles and optimizing and evaluating their performance to meet organizational goals.

Skills and attributes for success

<< Ideally, you’ll also>>

• Experience with other SOAR platforms and SIEM tools.
• Relevant certifications such as CISSP, CEH, or Palo Alto Networks certifications.
• Knowledge of cloud security services and environments (AWS, Azure, GCP).

What we look for

• Experience: 3+ years of experience in security automation and orchestration, with a focus on XSOAR.
• Technical Expertise: Proficiency in Palo Alto Cortex XSOAR, Python scripting, and integration of security tools.
• Security Knowledge: Strong understanding of security operations, incident response, and threat intelligence.
• Problem-Solving: Excellent analytical and problem-solving skills with the ability to troubleshoot complex issues.
• Communication: Strong verbal and written communication skills to effectively collaborate with team members and stakeholders.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

Our Commitment

As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.

Professional Development

From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.

People and Culture

In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We’re united by a commitment to create an environment where every individual’s differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.

Benefits

Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

We are an equal opportunity employer and are committed to Diversity, Equity & Inclusion

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.