Senior SOAR Engineer - Automation & Orchestration

Ernst & Young Oman; Boca Raton (FL); On-site; USD 126,000 - 210,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration. You will integrate SIEM, EDR/XDR, IAM, and cloud security tools while collaborating with SOC, IR, and engineering teams.

You will lead playbook development, pursue automation standards, and mentor junior staff as you help mature clients' security operations and analytics programs.

Qualifications

• Bachelor's degree in a related field and 2–4 years of relevant experience.
• Hands-on experience implementing or developing on enterprise SOAR platforms.
• Strong software development and scripting in Python, PowerShell or JavaScript.
• Experience designing REST APIs, web services, SDKs, and integrations.

Responsibilities

• Design, develop and maintain automated security workflows and SOAR playbooks.
• Integrate security tools, data sources, and processes across environments.
• Collaborate with SOC, incident response, threat intel and engineering teams.
• Build scalable integrations, APIs, and connectors for cloud and on‑premise apps.
• Mentor junior engineers and contribute to engineering best practices.

Skills

Python

PowerShell

JavaScript

REST APIs

Security automation

Education

Bachelor's degree in Computer Science/Engineering or related field

2-4 years of security automation / SOAR engineering experience

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration. You will integrate SIEM, EDR/XDR, IAM, and cloud security tools while collaborating with SOC, IR, and engineering teams.

You will lead playbook development, pursue automation standards, and mentor junior staff as you help mature clients' security operations and analytics programs.