Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

EY; Memphis (TN); On-site; USD 110,000 - 190,000; Full time

Job summary

EY seeks a Senior SOAR Engineer to design and optimize security automation workflows, integrating SIEM, EDR/XDR, IAM, and cloud security tools across diverse environments. You will develop playbooks, APIs, and connectors, mentor peers, and help scale automation initiatives withinEY’s cybersecurity practice.

You will work with Security Operations, Incident Response, Threat Intelligence, and Engineering teams to reduce response times, improve visibility, and mature client security programs.

Qualifications

• Bachelor’s degree in a related field with 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms such as Cortex XSOAR, Sentinel Automation, Splunk Phantom, Chronicle SOAR, Tines, D3, Swimlane, or similar.
• Strong software development and scripting using Python, PowerShell, JavaScript, or similar.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across ecosystems.
• Mentor junior engineers and contribute to automation standards and reusable frameworks.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Detection teams to identify automation opportunities.
• Create and maintain playbooks for incident triage, enrichment, containment, remediation, and reporting.

Skills

Python scripting

SOAR platforms

REST APIs

Cloud security

CI/CD

SOC collaboration

Education

Bachelor的 degree in Computer Science/Engineering/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design and optimize security automation workflows, integrating SIEM, EDR/XDR, IAM, and cloud security tools across diverse environments. You will develop playbooks, APIs, and connectors, mentor peers, and help scale automation initiatives withinEY’s cybersecurity practice.

You will work with Security Operations, Incident Response, Threat Intelligence, and Engineering teams to reduce response times, improve visibility, and mature client security programs.