Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

EY; Alabama; On-site; USD 110,000 - 160,000; Full time

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation that accelerates incident response and strengthens cyber resilience. You’ll work with SOC, Incident Response, Threat Intelligence, and Engineering to craft scalable playbooks and integrations across SIEM, EDR/XDR, IAM, and cloud security.

You’ll code with Python, PowerShell, and JavaScript, mentor junior engineers, and advance EY’s security automation program.

Qualifications

• Bachelor’s degree in a related field and 2–4 years of experience in security automation, SOAR engineering, or security operations.

Responsibilities

• Design, develop, and maintain automated security workflows across security tools and data sources.
• Integrate SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms to enable orchestrated responses.
• Create and optimize playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams; mentor junior engineers.

Skills

Python

PowerShell

JavaScript

REST APIs

Security automation

SOAR engineering

SIEM integration

Education

Bachelor’s degree in Computer Science, CS/Engineering, Cybersecurity, IT, MIS or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation that accelerates incident response and strengthens cyber resilience. You’ll work with SOC, Incident Response, Threat Intelligence, and Engineering to craft scalable playbooks and integrations across SIEM, EDR/XDR, IAM, and cloud security.

You’ll code with Python, PowerShell, and JavaScript, mentor junior engineers, and advance EY’s security automation program.