Senior SOAR Engineer: Automate Security Ops (Remote)

EY; San Antonio (TX); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response efficiency across SOC, IR, and Threat Intelligence teams. You will build scalable playbooks, integrate diverse security tools, and mentor junior engineers.

You will work across cloud environments (Azure, AWS, GCP) and security platforms to enable faster threat detection and remediation, while upholding secure development practices and engineering standards.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS or related field with 2–4 years of relevant experience.
• Hands-on experience implementing, administering, or developing enterprise SOAR platforms (e.g., Cortex XSOAR, Sentinel Automation, Splunk Phantom, Chronicle SOAR, Tines, D3, Swimlane).
• Strong software development and scripting skills (Python, PowerShell, JavaScript).
• Experience with REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes and working with SIEM/EDR/XDR, IAM, cloud security, vulnerability management, threat intel, and ticketing systems.
• Familiarity with Azure, AWS, GCP; automation in production; secure dev principles; CI/CD basics.
• Relevant certifications or ability to obtain them post-employment.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks for incident triage, enrichment, containment, and remediation.
• Integrate security tools, data sources, and processes across SOC, IR, Threat Intel, Detection Engineering, and Vulnerability teams.
• Develop custom integrations, APIs, connectors, and automation across cloud, security platforms, and enterprise apps.
• Mentor junior engineers and contribute to engineering best practices and automation standards.

Skills

Problem solving

Automation development

Mentoring

Security operations

Cross-functional collaboration

Education

Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response efficiency across SOC, IR, and Threat Intelligence teams. You will build scalable playbooks, integrate diverse security tools, and mentor junior engineers.

You will work across cloud environments (Azure, AWS, GCP) and security platforms to enable faster threat detection and remediation, while upholding secure development practices and engineering standards.