Senior SOAR Engineer: Automation & Orchestration

EY; Guin (AL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY seeks a Senior SOAR Engineer to design, develop and optimize security automation workflows across SIEM, EDR and cloud environments. You’ll build playbooks, integrate tools, and mentor junior staff while collaborating with SOC, IR and Threat Intelligence teams to improve incident response times.

Applicants should have hands-on SOAR experience with platforms such as Cortex XSOAR, Splunk Phantom, or Microsoft Sentinel, strong scripting skills, and a solid foundation in security operations and

Qualifications

• Bachelor’s degree (4-year) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field with 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands‑on experience implementing, administering, or developing solutions within enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, etc.).
• Strong software development and scripting experience using Python, PowerShell, JavaScript or similar.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes including alert triage, incident response, threat detection, and vulnerability management.
• Experience integrating cybersecurity technologies (SIEM, EDR/XDR, IAM, cloud security, threat intel, ticketing).
• Familiarity with IaC (Terraform, ARM, Bicep, CloudFormation) and DevSecOps/CI/CD pipelines.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance SOC operations.
• Integrate security tools, data sources, and processes across the cyber ecosystem; build scalable playbooks for incident triage, enrichment, containment, remediation and reporting.
• Mentor junior engineers and contribute to engineering best practices and automation standards.
• Collaborate with SOC, IR, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities.
• Develop integrations, APIs, connectors, and automation capabilities across on‑prem and cloud environments.

Skills

Software development

Scripting

REST APIs

Security operations

CI/CD

Cloud environments

Education

Bachelor's degree in CS/CE/IT or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, develop and optimize security automation workflows across SIEM, EDR and cloud environments. You’ll build playbooks, integrate tools, and mentor junior staff while collaborating with SOC, IR and Threat Intelligence teams to improve incident response times.

Applicants should have hands-on SOAR experience with platforms such as Cortex XSOAR, Splunk Phantom, or Microsoft Sentinel, strong scripting skills, and a solid foundation in security operations and