Senior SOAR Engineer: Automate Threat Response

Ernst & Young Oman; Tallahassee (FL); Remote; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows. You will integrate SIEMs, EDR/XDR, cloud security tools, and ticketing systems, while expanding SOAR capabilities across enterprise environments.

You will collaborate with SOC, IR, Threat Intelligence, and Engineering teams to optimize security operations and accelerate threat response. Mentoring teammates, maintaining code quality, and staying current with trends are expected.

Qualifications

• Bachelor’s degree in CS/CE/IT or related field with 2–4 years in security automation or SOAR engineering.
• Hands-on experience implementing enterprise SOAR platforms.
• Strong scripting in Python/PowerShell/JavaScript.
• Experience with REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations and incident response processes.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing tools.
• Understanding cloud platforms (Azure, AWS, GCP) and networking basics.
• Familiarity with secure development practices and CI/CD concepts.
• Relevant certifications or ability to obtain after employment.

Responsibilities

• Design, develop, and maintain automated security workflows for SOAR platforms.
• Integrate tools, data sources, and processes across cybersecurity ecosystem.
• Collaborate with SOC, IR, Threat Intel, Detection Engineering, and Vulnerability teams.
• Create playbooks for triage, enrichment, containment and remediation.
• Develop integrations, APIs, connectors, and automation across cloud and enterprise apps.
• Mentor junior engineers and contribute to engineering best practices.
• Stay current on threats, automation technologies, and evolving SOAR solutions.

Skills

Problem solving

Software engineering

Mentoring

Automation & orchestration

Cross-functional collaboration

Analytical thinking

Education

Bachelor's degree in CS/CE/IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows. You will integrate SIEMs, EDR/XDR, cloud security tools, and ticketing systems, while expanding SOAR capabilities across enterprise environments.

You will collaborate with SOC, IR, Threat Intelligence, and Engineering teams to optimize security operations and accelerate threat response. Mentoring teammates, maintaining code quality, and staying current with trends are expected.