Senior SOAR Engineer: Automate Threat Response

EY; Alpharetta (GA); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation workflows that accelerate threat response across diverse environments.

You will integrate SIEM, EDR/XDR, IAM, and cloud security with playbooks, APIs, and automation frameworks while collaborating with SOC, Incident Response, and Threat Intelligence teams. You will mentor junior engineers and shape security automation practices across engagements.

Qualifications

• Bachelor’s degree and 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms listed in the job description.
• Strong software development and scripting skills with Python, PowerShell, or JavaScript.

Responsibilities

• Design, develop, and maintain automated security workflows (playbooks) for incident triage, enrichment, containment, remediation, and reporting.
• Integrate security tools and data sources across the cloud and on-prem environments.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams.
• Mentor junior engineers and contribute to automation standards and frameworks.

Skills

SOAR engineering

Python

PowerShell

JavaScript

REST APIs

Security automation

SIEM/EDR/XDR

Cloud platforms

CI/CD

IaC

DevSecOps

Automation frameworks

Education

Bachelor's degree in Computer Science / Computer Engineering / Cybersecurity / Information Technology / MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation workflows that accelerate threat response across diverse environments.

You will integrate SIEM, EDR/XDR, IAM, and cloud security with playbooks, APIs, and automation frameworks while collaborating with SOC, Incident Response, and Threat Intelligence teams. You will mentor junior engineers and shape security automation practices across engagements.