Senior SOAR Engineer: Automate Security Operations

Ernst & Young Oman; Des Moines (IA); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation across diverse client environments. You will build automated workflows, integrate SIEM/EDR/IAM and cloud security, and mentor junior engineers.

You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to translate operational requirements into scalable automation. A strong focus on secure development and CI/CD is expected.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, IT, MIS, or related field.
• Hands-on experience with enterprise SOAR platforms as listed.
• Strong software development and scripting skills (Python, PowerShell, JavaScript).
• Experience consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes and incident workflows.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing tools.
• Cloud and infrastructure familiarity with Azure, AWS, GCP.
• Secure development practices including CI/CD and version control.
• Certifications or ability to obtain in Cortex XSOAR, SC-200, MITRE etc.

Responsibilities

• Design, develop, and maintain automated security workflows to boost SOC efficiency.
• Integrate security tools, data sources, and processes across a complex ecosystem.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop integrations, APIs, connectors, and automation across cloud and enterprise apps.
• Mentor junior engineers and contribute to automation standards and best practices.
• Collaborate with SOC, IR, Threat Intelligence, Detection Engineering, and Vulnerability teams.
• Stay current on threats, automation tech, and cloud-native security capabilities.

Skills

Problem solving

Software engineering

Mentor juniors

Automation opportunities

Integrations

Documentation & presentations

Quality standards

Cross-functional teamwork

Analytical thinking

Security-ops balance

Education

Bachelor's degree in CS/CE/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation across diverse client environments. You will build automated workflows, integrate SIEM/EDR/IAM and cloud security, and mentor junior engineers.

You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to translate operational requirements into scalable automation. A strong focus on secure development and CI/CD is expected.