Senior SOAR Engineer - Automation & Orchestration Lead

Ernst & Young Oman; Jericho (NY); Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation that accelerates threat response. You will collaborate with SOC, Incident Response, Threat Intelligence, and engineering teams to build scalable playbooks, integrate SIEM/EDR/IAM and cloud security tools, and deliver reliable automation across hybrid environments.

Bring 2–4 years in security automation, strong scripting (Python/PowerShell/JavaScript), REST APIs, and hands-on SOAR

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, IT, MIS or related field with 2–4 years of relevant experience.
• Hands-on experience with enterprise SOAR platforms and automation.
• Strong software development and scripting experience.

Responsibilities

• Design, develop, and maintain automated security workflows and SOAR playbooks.
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem.
• Collaborate with SOC/IR/Threat Intel/Detection Eng/Vulnerability Mgmt teams to identify automation opportunities.
• Develop incident triage, enrichment, containment, remediation, and reporting automation.
• Create integrations across cloud environments, SIEM, EDR/XDR, IAM, and ticketing platforms.
• Contribute to automation standards, reusable frameworks, and best practices; support deployments.
• Mentor junior engineers and provide technical leadership in security automation.

Skills

SOAR engineering

Automation development

Python

PowerShell

JavaScript

REST APIs

Security operations

CI/CD

Cloud integration

Mentoring

Education

Bachelor's degree in CS/Engineering/ cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation that accelerates threat response. You will collaborate with SOC, Incident Response, Threat Intelligence, and engineering teams to build scalable playbooks, integrate SIEM/EDR/IAM and cloud security tools, and deliver reliable automation across hybrid environments.

Bring 2–4 years in security automation, strong scripting (Python/PowerShell/JavaScript), REST APIs, and hands-on SOAR