Senior SOAR Engineer: Automation & Orchestration

EY; Seattle (WA); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off options

Job summary

EY seeks a Senior SOAR Engineer to design and optimize automated security workflows across enterprise environments. You will integrate SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms, delivering scalable automation across diverse tech stacks.

You will mentor junior engineers, contribute to automation standards, and stay current on evolving SOAR solutions, cloud-native security, and AI-assisted operations while supporting client deployments and ongoing enhancements.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, IT, MIS, or related field with 2–4 years in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, Chronicle SOAR, etc.).
• Strong software development and scripting experience (Python, PowerShell, JavaScript).
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools and data sources across the SOC, IR, and engineering teams.
• Create playbooks for incident triage, containment, remediation, and reporting.

Skills

SOAR engineering

Security automation

Scripting

REST APIs

Cloud integrations

Security operations

Education

Bachelor’s degree in CS / related field

Tools

Python

PowerShell

JavaScript

Job description

EY seeks a Senior SOAR Engineer to design and optimize automated security workflows across enterprise environments. You will integrate SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms, delivering scalable automation across diverse tech stacks.

You will mentor junior engineers, contribute to automation standards, and stay current on evolving SOAR solutions, cloud-native security, and AI-assisted operations while supporting client deployments and ongoing enhancements.