Senior SOAR Engineer — Automate & Orchestrate Security

Ernst & Young Oman; San Francisco (CA); On-site; USD 131,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that enhance detection, response, and operational efficiency. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate workflows and integrate a wide range of security technologies.

You will mentor junior engineers, contribute to automation standards, and stay current with emerging security automation trends across cloud environments and

Qualifications

• Bachelor's degree in Computer Science or related field with 2–4 years of security automation experience.
• Hands-on experience with enterprise SOAR platforms (e.g., Cortex XSOAR, Sentinel Automation, Phantom, Chronicle SOAR).
• Strong programming/scripting in Python, PowerShell, or JavaScript.
• Experience developing/rest APIs, web services, SDKs, and custom integrations.
• Knowledge of SIEM/EDR/IAM, cloud security, and threat management workflows.
• Familiarity with Azure, AWS, and Google Cloud Platform.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate security tools, data sources, and processes across SOC and IR teams.
• Lead automation initiatives, mentor junior engineers, and drive engineering best practices.
• Develop scalable integrations and APIs for cloud environments and security platforms.
• Ensure reliability, security, and maintainability of automation workloads.

Skills

Python

PowerShell

JavaScript

Automation development

Scripting

Education

Bachelor's degree in Computer Science or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that enhance detection, response, and operational efficiency. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate workflows and integrate a wide range of security technologies.

You will mentor junior engineers, contribute to automation standards, and stay current with emerging security automation trends across cloud environments and