Senior SOAR Engineer: Automate & Orchestrate Security

Ernst & Young Oman; Tucson (AZ); On-site; USD 105,000 - 190,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve cyber resilience. You will work with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate workflows, develop playbooks, and deliver scalable integrations across cloud and on-prem environments.

You will lead the design and deployment of automation standards, mentor colleagues, and stay current with evolving SOAR capabilities

Qualifications

• Bachelor's degree with 2-4 years in security automation, SOAR engineering, or related.
• Hands-on experience with enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, Sentinel, Chronicle).
• Strong software development and scripting in Python/PowerShell/JavaScript.
• Experience developing and consuming REST APIs and custom integrations.
• Knowledge of security operations processes including alert triage and incident response.

Responsibilities

• Design, develop, and maintain automated security workflows for SOAR platforms.
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem.
• Mentor junior engineers and contribute to engineering best practices.

Skills

Python

PowerShell

JavaScript

REST APIs

Education

Bachelor's degree in CS/Engineering/Cybersecurity or related

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Google Chronicle SOAR

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve cyber resilience. You will work with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate workflows, develop playbooks, and deliver scalable integrations across cloud and on-prem environments.

You will lead the design and deployment of automation standards, mentor colleagues, and stay current with evolving SOAR capabilities