Senior SOAR Engineer: Automation & Orchestration

Ernst & Young Oman; Tampa (FL); On-site; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

401(k) plans

Paid time off

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions across cloud and on-prem environments. You will build playbooks, integrate SIEM/EDR/IAM tools, and partner with SOC, Incident Response, and Threat Intel teams to reduce manual toil and improve resilience.

In this role, you will mentor juniors, contribute to automation standards, and help customers mature their security operations through scalable workflows, reusable frameworks, and best practices in

Qualifications

• Bachelor's degree and 2–4 years in security automation, SOAR engineering, or security operations.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Phantom, Splunk SOAR, etc.).
• Strong software development and scripting skills in Python/PowerShell/JavaScript or similar.
• Experience integrating SIEM, EDR/XDR, IAM, and other security technologies via REST APIs.

Responsibilities

• Design, develop, and maintain automated security workflows for security operations.
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem.
• Mentor junior engineers and contribute to EY cybersecurity engineering practice.

Skills

SOAR engineering

Python

REST APIs

Automation

Scripting

Security operations

Incident response

Cloud platforms

CI/CD

Education

Bachelor's degree in CS/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions across cloud and on-prem environments. You will build playbooks, integrate SIEM/EDR/IAM tools, and partner with SOC, Incident Response, and Threat Intel teams to reduce manual toil and improve resilience.

In this role, you will mentor juniors, contribute to automation standards, and help customers mature their security operations through scalable workflows, reusable frameworks, and best practices in