Senior SOAR Engineer: Automate Security Ops & Response

Ernst & Young Oman; Chattanooga (TN); Remote; USD 105,000 - 219,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design and implement security automation solutions that help clients respond to threats faster. You will build scalable playbooks, integrate SIEM/EDR/IAM tools, and collaborate with SOC, IR, and Threat Intelligence teams to optimize security operations.

You will mentor junior team members, contribute to automation standards, and stay current on cloud security and SOAR advancements to deliver maintainable, secure workflows across client environments.

Qualifications

• Bachelor’s degree in a relevant field with 2–4 years in security automation or SOAR engineering.
• Hands-on experience implementing enterprise SOAR platforms (XSOAR, Splunk Phantom, Sentinel, Chronicle).
• Strong scripting and software development skills (Python, PowerShell, JavaScript).
• Experience building REST APIs, integrations, and automation playbooks.
• Knowledge of security operations processes (SOC, IR, threat detection).
• Familiarity with cloud security and IAM, SIEM, EDR/XDR integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance efficiency of security operations.
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem.
• Mentor junior engineers and contribute to engineering best practices.
• Translate operational requirements into scalable automation solutions and playbooks.
• Stay current on evolving SOAR platforms, automation technologies, and cloud-native security.

Skills

SOAR engineering

Automation development

Programming/scripting

Security operations knowledge

REST APIs/integrations

Education

Bachelor’s degree (4-year)

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design and implement security automation solutions that help clients respond to threats faster. You will build scalable playbooks, integrate SIEM/EDR/IAM tools, and collaborate with SOC, IR, and Threat Intelligence teams to optimize security operations.

You will mentor junior team members, contribute to automation standards, and stay current on cloud security and SOAR advancements to deliver maintainable, secure workflows across client environments.