Senior SOAR Engineer — Automation & Orchestration Lead

EY; Beryl (WV); Remote; USD 148,000 - 190,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response. You will work with SOC, Incident Response, Threat Intelligence, and Engineering to automate workflows and integrate a wide range of security technologies across cloud and on‑prem environments.

You will develop playbooks for triage, enrichment, containment, remediation, and reporting, leveraging Python, PowerShell, and JavaScript.

Qualifications

• Bachelor’s degree and 2–4 years of experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms listed above.
• Strong software development and scripting in Python/PowerShell/JavaScript.
• Experience integrating SIEM/EDR/IAM and cloud security tools.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate security tools, data sources, and processes across security operations.
• Collaborate with SOC, IR, threat intel, and engineering teams to automate tasks.
• Mentor junior engineers and contribute to engineering best practices.

Skills

Python

PowerShell

JavaScript

REST APIs

CI/CD

Security Operations

Automation Development

Scripting

Mentoring

Education

Bachelor’s degree in Computer Science/Engineering or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response. You will work with SOC, Incident Response, Threat Intelligence, and Engineering to automate workflows and integrate a wide range of security technologies across cloud and on‑prem environments.

You will develop playbooks for triage, enrichment, containment, remediation, and reporting, leveraging Python, PowerShell, and JavaScript.