Senior SOAR Engineer - Security Automation Lead

Ernst & Young Oman; Cincinnati (OH); On-site; USD 126,000 - 210,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across client environments. You will automate workflows, integrate tools, and drive improvements in threat detection and incident response.

You will collaborate with SOC, IR, and engineering teams, mentor junior staff, and stay current on evolving SOAR platforms and security technologies. A strong automation background is required.

Qualifications

• Bachelor’s degree in a related field with 2–4 years of experience in security automation or SOAR engineering.
• Hands-on experience with enterprise SOAR platforms and security automation.
• Strong software development and scripting with Python/PowerShell/JavaScript.
• Experience developing and consuming REST APIs and integrations.
• Knowledge of security operations including incident response and threat detection.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security and ticketing platforms.
• Understanding of cloud environments (Azure, AWS, GCP).
• Certifications in cybersecurity or ability to acquire after employment.

Responsibilities

• Design, develop, and maintain automated security workflows.
• Integrate tools, data sources and processes across the security ecosystem.
• Collaborate with SOC, IR, Threat Intel, Detection Eng, and Vulnerability Management teams.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop integrations, APIs, connectors across cloud and enterprise apps.
• Contribute to automation standards and reusable frameworks.
• Mentor junior engineers and provide technical leadership.
• Stay current on threats, automation tech, and SOAR solutions.

Skills

Problem-solving

Automation development

Mentoring

Security operations

Cross-functional collaboration

Analytical skills

Technical documentation

REST APIs

Scripting

CI/CD

Cloud security

Education

Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across client environments. You will automate workflows, integrate tools, and drive improvements in threat detection and incident response.

You will collaborate with SOC, IR, and engineering teams, mentor junior staff, and stay current on evolving SOAR platforms and security technologies. A strong automation background is required.