Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

Ernst & Young Oman; Olympia (WA); Remote; USD 126,000 - 210,000; Full time

Benefits offered by this job

Flexible work options

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation across cloud and on-prem environments. You will work with SOC, IR, and engineering teams to automate incident response, enrichment, containment, and reporting through scalable playbooks.

You will develop integrations, APIs, and connectors using Python/PowerShell/JavaScript, mentor peers, and help mature EY's security automation program with best practices and modern tooling.

Qualifications

• Bachelor's degree in a related field with 2-4 years of security automation/SOAR experience.
• Hands-on experience with enterprise SOAR platforms listed in the job posting.
• Strong scripting in Python/PowerShell/JavaScript and REST API development.

Responsibilities

• Design, develop, and maintain automated security workflows and SOAR playbooks.
• Integrate security tools, data sources, and processes across the ecosystem.
• Mentor junior engineers and contribute to security automation best practices.
• Collaborate with SOC, IR, Threat Intel, and Detection teams to scale automation.
• Develop integrations across SIEM, EDR/XDR, IAM, cloud security, and ticketing tools.

Skills

Problem solving

Automation development

Mentor juniors

Automation opportunities

Integrations design

Documentation skills

Cross-functional teamwork

Security operations knowledge

Threat intel

CI/CD

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation across cloud and on-prem environments. You will work with SOC, IR, and engineering teams to automate incident response, enrichment, containment, and reporting through scalable playbooks.

You will develop integrations, APIs, and connectors using Python/PowerShell/JavaScript, mentor peers, and help mature EY's security automation program with best practices and modern tooling.