Senior SOAR Engineer: Automation & Incident Orchestration

EY; Chantilly (VA); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off options

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will automate incident triage, enrichment, containment, and reporting while integrating SIEM, EDR, IAM, and cloud security tools.

You will mentor junior engineers and help advance reusable automation frameworks, engineering standards, and best practices across cloud and enterprise environments.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity or related field with 2–4 years of relevant experience.
• Hands-on experience implementing or developing solutions within enterprise SOAR platforms.
• Strong software development and scripting in Python, PowerShell, JavaScript, and REST APIs.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, threat intel and ticketing platforms.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate SOAR platforms with security tools, data sources, and processes across environments.
• Mentor junior engineers and contribute to automation framework standards and best practices.
• Collaborate with SOC, incident response, threat intel, detection engineering, and vulnerability teams.
• Develop custom integrations, APIs, connectors, and automation capabilities across cloud and enterprise apps.

Skills

Python

PowerShell

JavaScript

REST APIs

SOAR engineering

Automation development

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions. You will automate incident triage, enrichment, containment, and reporting while integrating SIEM, EDR, IAM, and cloud security tools.

You will mentor junior engineers and help advance reusable automation frameworks, engineering standards, and best practices across cloud and enterprise environments.