Senior SOAR Engineer: Security Automation & Playbooks Lead

Ernst & Young Oman; Dallas (TX); Remote; USD 125,000 - 218,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across SOC, incident response, and threat intelligence teams. You will build scalable workflows, integrate a range of technologies, and drive automation maturity to reduce response times and maximize cybersecurity investments.

The role emphasizes scripting, API development, and platform engineering in diverse cloud environments, with mentorship and continuous learning as part of the engagement.

Qualifications

• Bachelor's degree in a related field with 2–4 years of relevant experience.
• Hands-on experience with listed enterprise SOAR platforms.
• Strong software development and scripting using Python, PowerShell, JavaScript.
• Experience developing and consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations, incident response, threat detection, vulnerability management.
• Experience integrating SIEM/EDR/IAM, cloud security, threat intelligence, and ticketing tools.
• Understanding of Azure, AWS, and GCP environments; CI/CD familiarity.
• Relevant certifications or ability to acquire them after employment.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance operations.
• Integrate security tools, data sources, and processes across ecosystems.
• Develop playbooks for incident triage, containment, remediation, and reporting.
• Create integrations, APIs, connectors, and automation across cloud and on‑premise apps.
• Mentor junior engineers and contribute to automation standards and best practices.

Skills

Security automation

SOAR engineering

Python

PowerShell

JavaScript

REST APIs

Security operations

Incident response

Threat intelligence

CI/CD

Cloud integrations

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation solutions across SOC, incident response, and threat intelligence teams. You will build scalable workflows, integrate a range of technologies, and drive automation maturity to reduce response times and maximize cybersecurity investments.

The role emphasizes scripting, API development, and platform engineering in diverse cloud environments, with mentorship and continuous learning as part of the engagement.