Senior SOAR Engineer - Security Automation Lead

EY; Oklahoma City (OK); On-site; USD 130,000 - 210,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster. You will partner with SOC, Incident Response, Threat Detection, and Engineering teams to automate workflows and integrate a broad set of security technologies across cloud and enterprise environments.

The role emphasizes hands-on development with Python/PowerShell/JavaScript, REST APIs, and building reusable playbooks, plus

Qualifications

• Bachelor’s degree in CS/related field with 2–4 years of relevant experience.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Chronicle SOAR, Phantom, etc.).
• Strong software development and scripting (Python, PowerShell, JS).
• Experience building REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes and incident workflows.
• Experience integrating SIEM, EDR/XDR, IAM, and cloud security tools.
• Understanding of infra, networks, OS, and cloud (Azure, AWS, GCP).
• Experience designing automation workflows and maintaining production runs.
• Knowledge of secure development, VCS, testing, and CI/CD; relevant certifications encouraged.

Responsibilities

• Design, develop, and maintain automated security workflows for SOC operations.
• Implement and optimize SOAR platforms by integrating tools, data sources, and processes.
• Collaborate with SOC, IR, Threat Intel, Detection and Vulnerability teams to identify automation.
• Develop playbooks for triage, enrichment, containment, remediation, and reporting.
• Create integrations and connectors across cloud and enterprise apps; APIs and automation standards.
• Mentor junior engineers and contribute to engineering best practices and standards.

Skills

Software development

Scripting

Security operations

Automation design

REST APIs

Cloud & infra

CI/CD

Documentation

Consulting skills

Education

Bachelor’s degree in CS/related field

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY in the United States is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster. You will partner with SOC, Incident Response, Threat Detection, and Engineering teams to automate workflows and integrate a broad set of security technologies across cloud and enterprise environments.

The role emphasizes hands-on development with Python/PowerShell/JavaScript, REST APIs, and building reusable playbooks, plus