Senior SOAR Engineer: Security Orchestration & Automation

Ernst & Young Oman; Kansas City (MO); Remote; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation workflows across SOC and incident response teams. You will build playbooks, integrate SIEM/EDR/IAM, and automate threat containment and reporting.

Join EY to advance security operations maturity, mentor junior engineers, and contribute to cloud and on‑premises automation initiatives while staying current with evolving SOAR solutions.

Qualifications

• Bachelor’s degree (4-year) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, MIS, or related field with 2–4 years of relevant experience.
• Hands-on experience with enterprise SOAR platforms (XSOAR, Sentinel Automation, Splunk Phantom, Chronicle SOAR, Tines, D3, Swimlane).
• Strong software development and scripting in Python, PowerShell, JavaScript, or similar.
• Experience designing and consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case workflows.
• Experience integrating cybersecurity tech (SIEM, EDR/XDR, IAM, cloud security, threat intel, ticketing).
• Understanding of cloud environments (Azure, AWS, GCP) and CI/CD practices.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance SOC effectiveness.
• Integrate security tools, data sources, and processes across environments.
• Mentor junior team members and provide technical leadership on automation projects.
• Develop playbooks for incident triage, containment, remediation, and reporting.
• Create custom integrations, APIs, and automation across cloud and on‑prem environments.

Skills

Advanced problem solving

Automation development

Mentoring

Cross-functional collaboration

Communication

Education

Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS or related

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design, implement, and optimize security automation workflows across SOC and incident response teams. You will build playbooks, integrate SIEM/EDR/IAM, and automate threat containment and reporting.

Join EY to advance security operations maturity, mentor junior engineers, and contribute to cloud and on‑premises automation initiatives while staying current with evolving SOAR solutions.