Senior SOAR Engineer: Automate Security Operations

EY; Lansing (MI); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and enhance cyber resilience. You will collaborate with SOC, incident response, threat intel, and engineering teams to automate tasks, orchestrate workflows, and integrate diverse security technologies across environments.

You will mentor junior engineers, contribute to automation standards, and stay current with evolving SOAR solutions and cloud-native security

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field.
• 2-4 years of relevant experience in security automation, SOAR engineering, security operations, or cybersecurity engineering.
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar languages.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across SOC, IR, threat detection, and engineering teams.
• Create playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Develop custom integrations and connectors across cloud environments and enterprise apps.

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and enhance cyber resilience. You will collaborate with SOC, incident response, threat intel, and engineering teams to automate tasks, orchestrate workflows, and integrate diverse security technologies across environments.

You will mentor junior engineers, contribute to automation standards, and stay current with evolving SOAR solutions and cloud-native security