Senior SOAR Engineer - Automate & Orchestrate Defenses

Ernst & Young Oman; Raleigh (NC); On-site; USD 105,000 - 219,000; Full time

Job summary

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response across client environments.

You will work with SOC, incident response, threat intel, and engineering teams to integrate SIEM, EDR/XDR, IAM, and cloud platforms, building scalable playbooks and reusable automation throughout complex security architectures.

Qualifications

• Bachelor's degree in CS/CE/Cybersecurity/IT/MIS with 2–4 years of related experience.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Splunk Phantom, Chronicle SOAR, etc.).
• Strong software development and scripting using Python, PowerShell, JavaScript, or similar.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across SOC, IR, threat intel, and engineering teams.
• Build playbooks for incident triage, enrichment, containment, remediation, and reporting.

Skills

Security automation

SOAR engineering

Python

PowerShell

JavaScript

REST APIs

Cloud environments

Incident response

Mentoring

Education

Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response across client environments.

You will work with SOC, incident response, threat intel, and engineering teams to integrate SIEM, EDR/XDR, IAM, and cloud platforms, building scalable playbooks and reusable automation throughout complex security architectures.