Senior SOAR Engineer: Automate & Orchestrate Security

EY; City of Albany (NY); Remote; USD 105,000 - 219,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows. You will work with Security Operations, Incident Response, Threat Detection, and Engineering teams to automate tasks, orchestrate workflows, and integrate security tools across cloud and on‑prem environments.

The role emphasizes scalable playbooks, API integrations, and maintaining reliable, secure automation while mentoring junior engineers and contributing to EY's cybersecurity engineering

Qualifications

• Bachelor's degree in a related field with 2–4 years in security automation or SOAR.
• Hands-on in enterprise SOAR platforms such as Cortex XSOAR, Sentinel, Splunk SOAR, Chronicle SOAR, Tines, D3, Swimlane.
• Strong software development and scripting with Python, PowerShell, or JavaScript.
• Experience with REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations: alert triage, IR, threat detection, vulnerability management.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, ticketing, and more.
• Understanding of cloud platforms (Azure, AWS, GCP) and infrastructure basics.
• Experience designing automation workflows and maintenance in production.
• Knowledge of secure software development, version control, testing, and CI/CD.
• Certs such as CySA+, GSEC, or Cortex XSOAR Engineer, or ability to obtain after employment.

Responsibilities

• Design, develop, and maintain automated security workflows for SOC operations.
• Integrate security tools, data sources, and processes across environments.
• Collaborate with SOC, IR, threat intel, detection engineering, and vuln teams.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop custom integrations, APIs, connectors, and automation across clouds and apps.
• Contribute to automation standards, reusable frameworks, and best practices.
• Mentor junior engineers and provide technical leadership on automation efforts.
• Stay current on threats, automation tech, and SOAR platform evolutions.

Skills

Advanced problem solving

Automation development

Mentoring

Cross-functional collaboration

Security operations knowledge

Analytical troubleshooting

Education

Bachelor's degree in CS/CE/Cybersecurity/IT/MIS or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows. You will work with Security Operations, Incident Response, Threat Detection, and Engineering teams to automate tasks, orchestrate workflows, and integrate security tools across cloud and on‑prem environments.

The role emphasizes scalable playbooks, API integrations, and maintaining reliable, secure automation while mentoring junior engineers and contributing to EY's cybersecurity engineering