Senior SOAR Engineer: Automation & Playbook Architect

EY; Madison (WI); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response times and operational efficiency. You will integrate a broad range of security tools across SIEM, EDR/XDR, IAM, and cloud security, while collaborating with SOC, IR, and Threat Intelligence teams.

The role emphasizes hands-on development, playbook automation, and production-grade reliability, with mentoring responsibilities and ongoing skill growth in modern security

Qualifications

• Bachelor’s degree in a related field and 2–4 years of security automation or SOAR experience.
• Hands-on experience with enterprise SOAR platforms such as listed.
• Strong software development and scripting skills in Python/PowerShell/JavaScript.
• Experience developing REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes including incident response and threat detection.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, threat intelligence, and ticketing platforms.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance operations.
• Integrate security tools, data sources, and processes across the cybersecurity ecosystem.
• Develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting.
• Mentor junior engineers and contribute to engineering best practices.
• Collaborate with SOC, IR, Threat Intelligence, Detection Eng, and Vulnerability teams to identify automation opportunities.

Skills

Python

PowerShell

JavaScript

REST APIs

SIEM

EDR/XDR

IAM

Cloud security

CI/CD

Security automation

Education

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response times and operational efficiency. You will integrate a broad range of security tools across SIEM, EDR/XDR, IAM, and cloud security, while collaborating with SOC, IR, and Threat Intelligence teams.

The role emphasizes hands-on development, playbook automation, and production-grade reliability, with mentoring responsibilities and ongoing skill growth in modern security