Senior SOAR Engineer: Automate & Orchestrate Security

EY; Palo Alto (CA); On-site; USD 131,000 - 219,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will collaborate with SOC, incident response, detection, and engineering teams to orchestrate workflows and automate repetitive tasks across cloud and on‑premise environments.

You will build scalable playbooks, integrate SIEM/EDR/IAM and cloud security tools, and mentor junior engineers while staying current with evolving SOAR platforms and security automation trends.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field.
• 2–4 years of relevant experience in security automation, SOAR engineering, security operations, or cybersecurity engineering.
• Hands-on experience with enterprise SOAR platforms and scripting languages.
• Experience developing and consuming REST APIs and custom integrations.
• Knowledge of security operations processes including alert triage and incident response.
• Experience integrating SIEM, EDR/XDR, IAM, and cloud security tools.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate SOAR platforms with security tools, data sources, and workflows across environments.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.

Skills

SOAR automation

Python

PowerShell

JavaScript

REST APIs

Security operations

CI/CD

Education

Bachelor’s degree in CS/Engineering/IT or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

REST SDKs & Integrations

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will collaborate with SOC, incident response, detection, and engineering teams to orchestrate workflows and automate repetitive tasks across cloud and on‑premise environments.

You will build scalable playbooks, integrate SIEM/EDR/IAM and cloud security tools, and mentor junior engineers while staying current with evolving SOAR platforms and security automation trends.