Senior SOAR Engineer: Automation & Orchestration

Ernst & Young Oman; Grand Rapids (MI); On-site; USD 126,000 - 210,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows across SOC, incident response, and threat detection. You will automate triage, enrichment, containment, and reporting while integrating SIEM/EDR, IAM, cloud security, and ticketing platforms.

You will mentor junior engineers, contribute to automation standards, and stay current on emerging security automation trends.

Qualifications

• Bachelor’s degree with 2–4 years of security automation/SOAR experience.
• Hands-on experience with enterprise SOAR platforms (examples listed).
• Strong software development and scripting (Python/PowerShell/JS) skills.

Responsibilities

• Design, develop, and maintain automated security workflows.
• Integrate security tools, data sources, and processes across ecosystems.
• Create playbooks for triage, containment, remediation, reporting.
• Develop custom integrations and APIs across cloud and on-prem apps.
• Mentor junior engineers and drive SOAR platform deployments.

Skills

Python

PowerShell

JavaScript

SOAR platforms

REST APIs

Security operations

SIEM / EDR

Cloud platforms

CI/CD

Automation engineering

Education

Bachelor's degree in CS/CE/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows across SOC, incident response, and threat detection. You will automate triage, enrichment, containment, and reporting while integrating SIEM/EDR, IAM, cloud security, and ticketing platforms.

You will mentor junior engineers, contribute to automation standards, and stay current on emerging security automation trends.