Senior SOAR Engineer - Automation & Security Orchestration

Ernst & Young Oman; St. Louis (MO); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows across diverse client environments.

You will integrate SIEM, EDR/XDR, IAM, and cloud security tools, develop reusable automation frameworks, and mentor junior engineers while staying current on security automation trends. This role emphasizes collaboration with SOC, IR, and Threat Intelligence teams.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field with 2–4 years of experience.
• Hands‑on experience with enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk Phantom).
• Strong software development and scripting (Python, PowerShell, JavaScript).
• Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
• Knowledge of security operations processes: alert triage, incident response, threat detection, vulnerability management.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, and ticketing platforms.
• Understanding of cloud environments (Azure, AWS, GCP).
• Experience designing and maintaining automation workflows in production.
• Knowledge of secure development, version control, testing, and CI/CD.

Responsibilities

• Design, implement, and optimize automated security workflows to improve detection and response.
• Integrate security tools, data sources, and processes across diverse ecosystems.
• Develop reusable playbooks for incident triage, containment, and remediation.
• Mentor junior engineers and contribute to automation standards and best practices.
• Collaborate with SOC, IR, Threat Intelligence, and engineering teams to drive security automation.

Skills

SOAR engineering

Python

REST APIs

Security operations

Cloud security

CI/CD

Mentoring

Education

Bachelor’s degree in Computer Science or related field

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel Automation

Google Chronicle SOAR

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows across diverse client environments.

You will integrate SIEM, EDR/XDR, IAM, and cloud security tools, develop reusable automation frameworks, and mentor junior engineers while staying current on security automation trends. This role emphasizes collaboration with SOC, IR, and Threat Intelligence teams.