Senior SOAR Engineer: Security Automation & Orchestration

Ernst & Young Oman; Greenville (SC); Remote; USD 105,000 - 192,000; Full time

Job summary

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster. You will work with SOC, incident response, threat intel, and engineering teams to automate workflows and integrate a wide range of security technologies across cloud and on‑prem environments.

This role emphasizes mentoring, secure development practices, and contributing to EY's cybersecurity engineering practice while staying current with evolving SOAR

Qualifications

• Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS with 2–4 years of relevant experience.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Sentinel, Splunk SOAR, Chronicle, Tines, D3, Swimlane).
• Strong software development and scripting (Python, PowerShell, JavaScript).
• Experience developing and consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case workflows.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, vulnerability management, threat intel, and ticketing platforms.
• Understanding of infrastructure, networking, OS, and cloud environments (Azure, AWS, GCP).
• Experience designing, testing, troubleshooting, and maintaining automation workflows in production.
• Knowledge of secure development principles, version control, testing, and CI/CD concepts.
• Certifications like MS Cybersecurity Architect Expert, SC-200, Splunk Core, Sec+, CySA+, GSEC, GCIH, XSOAR Engineer or ability to obtain.

Responsibilities

• Design, develop, and maintain automated security workflows for SOC operations.
• Integrate security tools, data sources, and processes across SOC, IR, threat intel, detection engineering, and vulnerability management.
• Create playbooks for incident triage, enrichment, containment, remediation, and reporting.
• Develop and maintain integrations across cloud, SIEM, EDR/XDR, IAM, cloud security, threat intel, and ticketing platforms.
• Mentor junior engineers and contribute to EY's cybersecurity engineering practice growth.
• Stay current on threats, automation technologies, cloud-native security, and evolving SOAR solutions.

Skills

Problem solving

Software engineering

Mentoring

Automation opportunities

Integrations

Technical writing

Quality standards

Teamwork

Troubleshooting

Security balance

Education

Bachelor's degree in CS/CE/ Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY seeks a Senior SOAR Engineer to design, implement, and optimize security automation solutions that help clients respond to threats faster. You will work with SOC, incident response, threat intel, and engineering teams to automate workflows and integrate a wide range of security technologies across cloud and on‑prem environments.

This role emphasizes mentoring, secure development practices, and contributing to EY's cybersecurity engineering practice while staying current with evolving SOAR