Senior SOAR Engineer — Automation & Orchestration

EY; Fort Worth (TX); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across a broad set of security technologies. You will collaborate with SOC, IR, threat intel, and engineering to automate workflows and integrate tools for faster incident response.

You’ll mentor junior team members, contribute to engineering best practices, and stay current on evolving SOAR platforms and cloud security. EY offers comprehensive rewards and a global, diverse environment.

Qualifications

• A Bachelor’s degree in a related field with 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience implementing or developing in enterprise SOAR platforms such as Cortex XSOAR, Splunk Phantom, or equivalent.
• Strong software development and scripting skills (Python, PowerShell, JavaScript).
• Experience building REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes and tooling (SIEM, EDR/XDR, IAM, ticketing).
• Familiarity with cloud security and various cloud providers (Azure, AWS, GCP).
• Certification in cybersecurity or SOAR-related areas is a plus or obtainable after employment.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and workflows across SOC, IR, threat intel, and engineering teams.
• Build playbooks for triage, enrichment, containment, remediation, and reporting of security incidents.
• Develop and maintain integrations, APIs, connectors, and automations across cloud environments and security platforms.
• Mentor junior engineers and contribute to practice growth; stay current on security automation trends.

Skills

SOAR engineering

Security automation

Python

PowerShell

JavaScript

REST APIs

Cloud security

SIEM integration

EDR/XDR

Azure/AWS/GCP

Education

Bachelor’s degree in CS/CE/cybersecurity

Tools

Cortex XSOAR

Splunk SOAR

Microsoft Sentinel

Tines

Swimlane

D3 Security

Chronicle SOAR

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across a broad set of security technologies. You will collaborate with SOC, IR, threat intel, and engineering to automate workflows and integrate tools for faster incident response.

You’ll mentor junior team members, contribute to engineering best practices, and stay current on evolving SOAR platforms and cloud security. EY offers comprehensive rewards and a global, diverse environment.