Senior SOAR Engineer: Automate & Orchestrate Cyber Defense

Ernst & Young Oman; Woodbridge Township (NJ); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve visibility across security operations.

You will collaborate with SOC, Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to build scalable playbooks, integrate tools (SIEM, EDR/XDR, IAM, cloud security), and automate incident triage, enrichment, containment, remediation, and reporting.

Qualifications

• Bachelor's degree and 2-4 years in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms.
• Strong software development and scripting in Python/PowerShell/JavaScript.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across SIEM, EDR/XDR, IAM, and cloud security.
• Develop playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Mentor junior engineers and provide technical leadership on automation initiatives.
• Stay current on emerging threats and SOAR advancements; contribute to engineering best practices.

Skills

Python

PowerShell

JavaScript

REST APIs

CI/CD

Security automation

Scripting

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR/Phantom

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve visibility across security operations.

You will collaborate with SOC, Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to build scalable playbooks, integrate tools (SIEM, EDR/XDR, IAM, cloud security), and automate incident triage, enrichment, containment, remediation, and reporting.