Senior SOAR Engineer: Automate, Orchestrate & Secure

Ernst & Young Oman; Richmond (VA); On-site; USD 105,000 - 219,000; Full time

Job summary

The EY team is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and orchestrate complex workflows across cloud and on‑prem environments.

You will work with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate triage, enrichment, containment, and reporting, while mentoring junior engineers and advancing security automation standards across client engagements.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS or related field.
• 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms and automation
• Proficiency in Python, PowerShell, JavaScript or equivalent scripting languages
• Experience developing REST APIs, web services and custom integrations

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate security tools, data sources, and processes across the security stack.
• Collaborate with SOC, Incident Response, Threat Intelligence, Detection Engineering and Vulnerability teams.
• Develop custom integrations, APIs, and cloud/enterprise automation across environments.
• Ensure reliability, security, and maintainability of automation pipelines.

Skills

Automation development

Security operations

Mentoring

Collaboration

Problem solving

Education

Bachelor’s degree in CS/Engineering/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

The EY team is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and orchestrate complex workflows across cloud and on‑prem environments.

You will work with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate triage, enrichment, containment, and reporting, while mentoring junior engineers and advancing security automation standards across client engagements.