Senior SOAR Engineer—Automation & Orchestration Leader

Ernst & Young Oman; Miami (FL); Presencial; USD 105 000 - 210 000; Tempo integral

Resumo da oferta

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and orchestration across security tools and cloud environments.

You will work with SOC, IR, threat intel, and engineering teams to build scalable playbooks, APIs, and integrations, while mentoring junior staff and advancing automation standards within a global cybersecurity practice.

Qualificações

• Bachelor's degree and 2–4 years in security automation or SOAR.
• Hands-on experience with enterprise SOAR platforms.
• Strong scripting and REST API development.
• Experience with SIEM/EDR/XDR, IAM, cloud security.

Responsabilidades

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate SOAR platforms with security tools, data sources, and processes.
• Collaborate with SOC, IR, threat intel, detection engineering, and vulnerability teams to automate workflows.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop integrations and APIs across cloud environments and enterprise apps.
• Mentor junior engineers and contribute to automation standards.

Conhecimentos

Python

PowerShell

JavaScript

REST APIs

SOAR engineering

Security automation

CI/CD

Azure

AWS

GCP

Formação académica

Bachelor's degree in CS/CE/Cybersecurity/IT or related field

Ferramentas

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Descrição da oferta de emprego

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and orchestration across security tools and cloud environments.

You will work with SOC, IR, threat intel, and engineering teams to build scalable playbooks, APIs, and integrations, while mentoring junior staff and advancing automation standards within a global cybersecurity practice.