Senior SOAR Engineer: Automation & Orchestration

EY; West Virginia; Remote; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Professional development opportunities

Job summary

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration. You will integrate SIEM, EDR/XDR, IAM and cloud security tools, building scalable playbooks and custom integrations across enterprise environments.

You will work with SOC, incident response, threat intelligence, and cloud security teams to deliver secure, reliable automation while mentoring other engineers and staying current on evolving SOAR solutions.

Qualifications

• Bachelor’s degree in a related field plus 2–4 years of security automation/SOAR engineering experience.
• Hands-on experience implementing or developing solutions on enterprise SOAR platforms.
• Strong development and scripting skills (Python, PowerShell, JavaScript) and REST API usage.

Responsibilities

• Design, develop, and maintain automated security workflows to improve security operations.
• Integrate security tools, data sources, and processes across security ecosystems.
• Build playbooks for incident triage, enrichment, containment, remediation and reporting.
• Mentor junior engineers and contribute to best practices in automation.

Skills

Python

PowerShell

JavaScript

REST APIs

CI/CD

Cloud security

SOC collaboration

Education

Bachelor's degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design and implement automated security workflows that accelerate threat response and orchestration. You will integrate SIEM, EDR/XDR, IAM and cloud security tools, building scalable playbooks and custom integrations across enterprise environments.

You will work with SOC, incident response, threat intelligence, and cloud security teams to deliver secure, reliable automation while mentoring other engineers and staying current on evolving SOAR solutions.