Senior SOAR Engineer - Automation & Security Orchestration

Ernst & Young Oman; Toledo (OH); Remote; USD 110,000 - 190,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response and security operations. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate repetitive tasks and orchestrate complex workflows.

The role requires hands-on experience with enterprise SOAR platforms, strong scripting skills, and the ability to develop integrations across cloud and on-prem environments.

Qualifications

• Bachelor's degree in a related field with 2–4 years of relevant experience.
• Hands-on experience with enterprise SOAR platforms like Cortex XSOAR, Splunk SOAR, or similar.
• Strong software development and scripting in Python/PowerShell/JavaScript.
• Experience developing/rest APIs, web services, SDKs, and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows for SOC efficiency.
• Integrate SOAR with SIEM, EDR/XDR, IAM, and cloud security tools across environments.
• Mentor junior team members and contribute to security automation best practices.
• Translate operational requirements into scalable automation solutions and playbooks.

Skills

SOAR platforms

Python

PowerShell

JavaScript

REST APIs

Education

Bachelor's degree

Tools

Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR

Chronicle SOAR

Tines

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that improve incident response and security operations. You will collaborate with SOC, Incident Response, Threat Intelligence, and Engineering teams to automate repetitive tasks and orchestrate complex workflows.

The role requires hands-on experience with enterprise SOAR platforms, strong scripting skills, and the ability to develop integrations across cloud and on-prem environments.