Senior SOAR Engineer - Security Automation & Orchestration

Ernst & Young Oman; Sacramento (CA); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer in the US to design, implement, and optimize security automation solutions that accelerate threat response. You will automate workflows, integrate security tools, and collaborate with SOC, IR, and engineering teams to mature security operations.

The role emphasizes scripting, API integrations, and platform engineering across cloud environments, with mentoring duties and ongoing professional development in modern security operations.

Qualifications

• Bachelor’s degree in a related field with 2–4 years of relevant experience in security automation or SOAR engineering.
• Hands-on experience implementing enterprise SOAR platforms and integrating security tools.
• Strong scripting experience in Python/PowerShell/JavaScript and REST API development.
• Experience with SIEM/EDR/IAM and cloud security integrations.
• Understanding of Azure/AWS/GCP and security engineering best practices.
• Certification in relevant cybersecurity or SOAR tech is a plus.

Responsibilities

• Design, develop, and maintain automated security workflows and SOAR playbooks.
• Integrate security tools, data sources, and processes across SOC, IR, Threat Intel, and engineering teams.
• Develop custom integrations, APIs, connectors, and automation across cloud and enterprise apps.
• Mentor junior engineers and contribute to security automation best practices.
• Stay current on threats, automation tech, and SOAR solutions; assist with deployments and upgrades.

Skills

SOAR engineering

Python scripting

REST APIs

Security operations

CI/CD

Cloud platforms

Team mentoring

Cross-functional collaboration

Problem solving

Automation design

Education

Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Google Chronicle SOAR

APIs & integrations

Job description

EY is seeking a Senior SOAR Engineer in the US to design, implement, and optimize security automation solutions that accelerate threat response. You will automate workflows, integrate security tools, and collaborate with SOC, IR, and engineering teams to mature security operations.

The role emphasizes scripting, API integrations, and platform engineering across cloud environments, with mentoring duties and ongoing professional development in modern security operations.