Senior SOAR Engineer: Automate & Orchestrate Security Ops

Ernst & Young Oman; Concord (NH); Remote; USD 126,000 - 200,000; Full time

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows across SOC environments. You will develop playbooks, integrate SIEM/EDR and cloud security, and drive automation initiatives to improve threat response times and resilience.

You will mentor teammates, collaborate with incident response and threat intelligence teams, and stay current with automation trends and cloud-native security. The role emphasizes engineering excellence and secure coding practices.

Qualifications

• Bachelor degree and 2–4 years in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms listed in the qualifications.
• Strong software development and scripting skills in Python/PowerShell/JavaScript.

Responsibilities

• Design and maintain automated security workflows to enhance operations.
• Implement and optimize SOAR platforms with security tools and data sources.
• Develop playbooks for incident triage, enrichment, containment, remediation, reporting.
• Mentor junior engineers and contribute to security automation best practices.

Skills

Security automation

SOAR engineering

Security operations

Cybersecurity engineering

Python

PowerShell

JavaScript

REST APIs

Automation scripting

CI/CD

Cloud platforms

Team leadership

Education

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows across SOC environments. You will develop playbooks, integrate SIEM/EDR and cloud security, and drive automation initiatives to improve threat response times and resilience.

You will mentor teammates, collaborate with incident response and threat intelligence teams, and stay current with automation trends and cloud-native security. The role emphasizes engineering excellence and secure coding practices.