Senior SOAR Engineer — Automation & Orchestration

EY; City of Rochester (NY); On-site; USD 126,000 - 210,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks a Senior SOAR Engineer in the US to design, implement, and optimize security automation workflows across SOC, incident response, threat intelligence, and engineering teams. You will automate tasks, orchestrate complex playbooks, and integrate diverse security tools in cloud and on‑prem environments.

You will mentor junior engineers, contribute to automation standards, and stay current with evolving SOAR solutions and security operations trends.

Qualifications

• Bachelor’s degree in a related field and 2–4 years of experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Sentinel, Phantom, Chronicle, Tines, D3, Swimlane).
• Strong software development and scripting skills (Python, PowerShell, JavaScript).
• Experience building REST APIs, web services, SDKs, or integrations.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms.
• Lead automation initiatives across SOC, IR, threat intel, and engineering teams.
• Mentor junior engineers and contribute to automation standards.

Skills

Automation development

Security operations knowledge

Mentoring

Education

Bachelor’s degree in CS / Cybersecurity / IT

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer in the US to design, implement, and optimize security automation workflows across SOC, incident response, threat intelligence, and engineering teams. You will automate tasks, orchestrate complex playbooks, and integrate diverse security tools in cloud and on‑prem environments.

You will mentor junior engineers, contribute to automation standards, and stay current with evolving SOAR solutions and security operations trends.