Senior SOAR Engineer: Security Automation Leader

EY; San Jose (CA); On-site; USD 131,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) retirement plan

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that streamline incident response and threat containment. You will collaborate with SOC, IR, threat intel, and engineering teams to translate operational needs into scalable automations across cloud and on‑prem environments.

You’ll mentor junior colleagues, contribute to automation standards, and stay informed on evolving security automation trends and cloud security capabilities.

Qualifications

• Bachelor’s degree in a related field and 2–4 years of relevant experience in security automation, SOAR engineering or security operations.
• Hands-on experience implementing or developing solutions on enterprise SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, Swimlane).
• Strong software development and scripting skills (Python, PowerShell, JavaScript) and REST API usage.

Responsibilities

• Design, develop, and maintain automated security workflows and playbooks.
• Integrate security tools, data sources, and processes across security operations and engineering teams.
• Build and optimize SOAR platforms with reliable, scalable automations for incident response and remediation.
• Mentor junior engineers and contribute to engineering best practices and standards.
• Stay current with new security automation trends, cloud security, and SOAR solutions.

Skills

Python

PowerShell

JavaScript

REST APIs

SOAR

Security Operations

Automation

Platform Engineering

Education

Bachelor’s degree

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize automated security workflows that streamline incident response and threat containment. You will collaborate with SOC, IR, threat intel, and engineering teams to translate operational needs into scalable automations across cloud and on‑prem environments.

You’ll mentor junior colleagues, contribute to automation standards, and stay informed on evolving security automation trends and cloud security capabilities.