Senior SOAR Automation Engineer

EY; Las Vegas (NV); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration across SOC, IR, and threat intel teams. You will integrate SIEM, EDR/XDR, IAM, and cloud security tools, while mentoring teammates and shaping automation standards.

You will work with clients to deploy and optimize SOAR platforms, ensuring scalable, secure, and maintainable automation across cloud and on‑prem environments.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS or related field required.
• Hands-on experience with enterprise SOAR platforms (Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Chronicle SOAR, Tines, D3, Swimlane) preferred.
• Strong software development and scripting experience (Python, PowerShell, JavaScript).
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes: alert triage, incident response, threat detection, vulnerability management, case workflows.
• Experience integrating cybersecurity technologies (SIEM, EDR/XDR, IAM, email, network, cloud security, vulnerability mgmt, threat intel, ticketing).
• Understanding of infrastructure, networking, OS, and cloud (Azure, AWS, GCP).
• Experience designing, testing, troubleshooting, maintaining automation workflows in production.
• Secure development principles, VCS, testing, and CI/CD practices.
• Certifications or willingness to obtain (e.g., MS Cybersecurity Architect, MS SC-200, Splunk Core, Security+).

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across SOC, IR, threat intel, and engineering teams.
• Build playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Develop APIs, connectors, and integrations across cloud, security platforms, and enterprise apps.
• Mentor junior staff and contribute to security automation standards and frameworks.
• Assist clients with SOAR deployments, upgrades, and operational improvements.
• Stay current on threats, automation tech, and cloud-native security capabilities.

Skills

SOAR platforms experience

Python

PowerShell

JavaScript

REST APIs

Security operations

SIEM integrations

EDR/XDR

IAM

Threat intelligence

Ticketing platforms

Cloud platforms (Azure/AWS/GCP)

Automation workflows

Secure development

Education

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS or related field

Security certifications eligibility (e.g., CySA+, GSEC, MS Cybersecurity Architect)

Tools

REST APIs

Job description

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration across SOC, IR, and threat intel teams. You will integrate SIEM, EDR/XDR, IAM, and cloud security tools, while mentoring teammates and shaping automation standards.

You will work with clients to deploy and optimize SOAR platforms, ensuring scalable, secure, and maintainable automation across cloud and on‑prem environments.