Senior SOAR Engineer | Automate & Orchestrate Cyber Defense

Ernst & Young Oman; Charleston (WV); On-site; USD 105,000 - 193,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients detect and respond to threats faster. You will work with SOC, incident response, threat intelligence, and engineering teams to automate workflows and integrate security technologies across complex environments.

You will mentor junior engineers, contribute to automation standards, and drive security orchestration initiatives across engagements, including cloud security, SIEM/EDR

Qualifications

• Bachelor's degree in CS/CE/Cybersecurity with 2–4 years in security automation.
• Hands-on experience with enterprise SOAR platforms listed.
• Strong programming and scripting in Python/PowerShell/JS.
• Experience with REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes and incident response.
• Familiarity with cloud providers (Azure, AWS, GCP) and IAM, SIEM, EDR/XDR.

Responsibilities

• Design, develop, and maintain automated security workflows.
• Integrate security tools, data sources, and processes across environments.
• Collaborate with SOC, IR, threat intel, detection, and engineering teams.
• Create playbooks for triage, enrichment, containment, remediation, reporting.
• Develop APIs, connectors, and automations across cloud and enterprise apps.

Skills

SOAR engineering

Python

PowerShell

JavaScript

REST APIs

CI/CD

Security automation

Cloud security

Scripting

Incident response

Education

Bachelor's degree in CS/CE/Cybersecurity/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients detect and respond to threats faster. You will work with SOC, incident response, threat intelligence, and engineering teams to automate workflows and integrate security technologies across complex environments.

You will mentor junior engineers, contribute to automation standards, and drive security orchestration initiatives across engagements, including cloud security, SIEM/EDR