Senior SOAR Engineer — Automate Cyber Defense at Scale

EY; Detroit (MI); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will automate incident triage, enrichment, containment, remediation, and reporting while integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing systems.

You will collaborate with SOC, incident response, threat intel, and engineering teams to mature security operations, scale playbooks, and mentor junior engineers.

Qualifications

• Bachelor’s degree in Computer Science or related field with 2–4 years in security automation/SOAR engineering
• Hands-on experience implementing or developing solutions within enterprise SOAR platforms
• Strong software development and scripting in Python/PowerShell/JavaScript
• Experience developing and consuming REST APIs and custom integrations
• Knowledge of security operations processes and incident response workflows
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms
• Proficiency with cloud environments (Azure, AWS, GCP) and CI/CD concepts
• Certifications such as Microsoft/Cortex XSOAR or equivalent or ability to obtain after employment

Responsibilities

• Design, develop, and maintain automated security workflows to improve security operations
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem
• Develop playbooks for incident triage, enrichment, containment, remediation, and reporting
• Build custom integrations, APIs, connectors, and automation across cloud and enterprise apps
• Mentor junior engineers and contribute to automation standards and best practices

Skills

Python

PowerShell

JavaScript

Automation

Education

Bachelor’s degree in Computer Science

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will automate incident triage, enrichment, containment, remediation, and reporting while integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing systems.

You will collaborate with SOC, incident response, threat intel, and engineering teams to mature security operations, scale playbooks, and mentor junior engineers.