Senior SOAR Engineer - Automation & SecOps Lead

EY; Florida; On-site; USD 125,000 - 180,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer in Florida to design, implement, and optimize automated security workflows. You will integrate a range of security tools and data sources, building scalable playbooks that streamline incident triage, containment, and reporting.

You will collaborate with SOC, Incident Response, Threat Intelligence, and Detection Engineering teams, mentoring junior engineers while advancing EY's security automation program across cloud and on-premises environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, MIS, or related field with 2–4 years of security automation/SOAR experience.
• Hands-on experience implementing or developing SOAR solutions (Palo Alto Cortex XSOAR, Splunk SOAR, Swimlane, etc.).
• Strong programming and scripting in Python, PowerShell, JavaScript, or automation-focused languages.
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows.
• Experience integrating SIEM/EDR/XDR, IAM, cloud security, threat intelligence, and ticketing platforms.
• Understanding of cloud environments (Azure, AWS, GCP) and IaC concepts.

Responsibilities

• Design, develop, and maintain automated security workflows.
• Integrate security tools, data sources, and operational processes across environments.
• Collaborate with SOC, IR, Threat Intelligence, Detection Engineering, and VM teams to identify automation opportunities.
• Design playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop custom integrations, APIs, connectors, and automation across cloud and enterprise apps.
• Mentor junior engineers and contribute to security automation strategy and best practices.
• Stay current on threats and SOAR trends; participate in training and industry forums.

Skills

Python

PowerShell

JavaScript

REST APIs

SOAR engineering

Security operations

Incident response

CI/CD

Automation

Threat intelligence

Education

Bachelor's degree in Computer Science/Cybersecurity/IT or related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer in Florida to design, implement, and optimize automated security workflows. You will integrate a range of security tools and data sources, building scalable playbooks that streamline incident triage, containment, and reporting.

You will collaborate with SOC, Incident Response, Threat Intelligence, and Detection Engineering teams, mentoring junior engineers while advancing EY's security automation program across cloud and on-premises environments.