Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

Ernst & Young Oman; Hoboken (NJ); On-site; USD 105,000 - 210,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster and more effectively. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate tasks, orchestrate complex workflows, and integrate a wide range of security technologies.

You will develop playbooks for triage, enrichment, containment, remediation, and reporting, while ensuring reliability, security, and

Qualifications

• Bachelor's degree in a related field plus 2–4 years in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Chronicle SOAR, Tines, D3 Security, Swimlane, or similar technologies.
• Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused languages.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows and SOAR playbooks.
• Integrate security tools, data sources, and workflows across cloud and on-prem environments.
• Collaborate with SOC, Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities.
• Mentor junior engineers and contribute to engineering best practices in security automation.

Skills

Python

PowerShell

JavaScript

REST APIs

Scripting

Automation engineering

Security operations

Education

Bachelor’s degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR/ Phantom

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster and more effectively. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate tasks, orchestrate complex workflows, and integrate a wide range of security technologies.

You will develop playbooks for triage, enrichment, containment, remediation, and reporting, while ensuring reliability, security, and