Senior SOAR Engineer — Remote Automation & Orchestration

EY; San Francisco (CA); Remote; USD 131,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve SOC efficiency. You will integrate a broad set of security tools, APIs, and cloud services, delivering scalable workflows across diverse environments.

The role requires strong scripting, REST API experience, and hands-on SOAR platform expertise, with opportunities to mentor teammates and drive engineering best practices.

Qualifications

• Bachelor's degree in a technical field with 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms and integrating security tools.
• Proficiency in software development and scripting (Python, PowerShell, JavaScript).
• Experience developing and consuming REST APIs and custom integrations.

Responsibilities

• Design, develop, and maintain automated security workflows to optimize security operations.
• Integrate security tools, data sources, and processes across security ecosystems.
• Build playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Mentor junior engineers and contribute to the automation standards and frameworks.

Skills

SOAR engineering

Python scripting

REST APIs

Security operations

Cloud platforms

Automation design

Cross-functional collaboration

Education

Bachelor's degree in CS/CE/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines/D3/Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that accelerate threat response and improve SOC efficiency. You will integrate a broad set of security tools, APIs, and cloud services, delivering scalable workflows across diverse environments.

The role requires strong scripting, REST API experience, and hands-on SOAR platform expertise, with opportunities to mentor teammates and drive engineering best practices.