Senior SOAR Engineer: Automation & Playbooks

EY; Sacramento (CA); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is hiring a Senior SOAR Engineer to design, implement, and optimize automated security workflows that accelerate threat response.

You will integrate SIEM, EDR, IAM, cloud security, and ticketing platforms while collaborating with SOC, incident response, and threat intelligence teams. The role emphasizes mentoring, scalability, and security of automation across on-prem and cloud environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field with 2–4 years of relevant security automation/SOAR experience.
• Hands-on experience with enterprise SOAR platforms such as Cortex XSOAR, Sentinel Automation, Splunk SOAR, Chronicle SOAR, or similar.
• Strong software development and scripting in Python, PowerShell, or JavaScript.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate security tools, data sources, and processes across the ecosystem.
• Collaborate with SOC, IR, threat intel, and engineering teams to automate tasks and orchestrate workflows.
• Mentor junior engineers and contribute to automation standards and best practices.

Skills

Python

PowerShell

JavaScript

REST APIs

SOAR

SIEM

EDR/XDR

Cloud

DevSecOps

Education

Bachelor’s degree in related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is hiring a Senior SOAR Engineer to design, implement, and optimize automated security workflows that accelerate threat response.

You will integrate SIEM, EDR, IAM, cloud security, and ticketing platforms while collaborating with SOC, incident response, and threat intelligence teams. The role emphasizes mentoring, scalability, and security of automation across on-prem and cloud environments.