Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

Ernst & Young Oman; Orlando (FL); On-site; USD 105,000 - 210,000; Full time

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and enhance cyber resilience. You will collaborate with SOC, Incident Response, Threat Intel, and Engineering teams to automate workflows and orchestrate diverse security tools across cloud and on‑prem environments.

You will mentor junior engineers, contribute to automation standards, and stay current with new SOAR platforms, security trends, and best practices in

Qualifications

• Bachelor's degree in a related field and 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Splunk Phantom, Chronicle SOAR, etc.).
• Strong programming/scripting skills (Python, PowerShell, JavaScript).
• Experience developing REST APIs, web services, SDKs, and integrations.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate security tools, data sources, and processes across SOC, IR, threat intel and engineering teams.
• Build custom integrations, APIs, connectors, and automation across cloud and on‑prem environments.
• Mentor junior engineers and contribute to automation standards and best practices.

Skills

SOAR engineering

Python

PowerShell/JavaScript

REST APIs

SIEM/EDR/XDR

Cloud security

CI/CD

Security automation

Automation frameworks

Incident response

Education

Bachelor's degree in Computer Science or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and enhance cyber resilience. You will collaborate with SOC, Incident Response, Threat Intel, and Engineering teams to automate workflows and orchestrate diverse security tools across cloud and on‑prem environments.

You will mentor junior engineers, contribute to automation standards, and stay current with new SOAR platforms, security trends, and best practices in