SOAR Security Engineer — Automate, Orchestrate & Respond

Ernst & Young Oman; Little Rock (AR); Remote; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior SOAR Engineer to design and implement security automation that accelerates threat response and improves efficiency. You will build scalable playbooks, integrate SIEM/EDR/IAM and cloud tools, and work across SOC, IR, and engineering teams.

You’ll apply Python/PowerShell/JavaScript skills to create reliable automation across cloud and on‑prem environments, while guiding junior engineers and advancing engineering best practices.

Qualifications

• Bachelor’s degree in CS/CE/Cybersecurity/IT/MIS or related field with 2–4 years security automation or SOAR experience.
• Hands-on experience implementing, administering, or developing enterprise SOAR platforms.
• Strong software development and scripting using Python, PowerShell, JavaScript, or similar.
• Experience developing and consuming REST APIs, web services, SDKs, and integrations.
• Knowledge of security operations processes including alert triage and incident response.
• Experience integrating SIEM, EDR/XDR, IAM, cloud security, threat intel, and ticketing platforms.
• Understanding of cloud environments: Azure, AWS, GCP.
• Experience designing and maintaining automation workflows in production; CI/CD familiarity.
• Certs such as Microsoft Cybersecurity Architect, SS-200, Splunk Core, CySA+, GSEC, or Cortex XSOAR Engineer, or ability to obtain.

Responsibilities

• Design, develop, and maintain automated security workflows to enhance security operations.
• Integrate tools, data sources, and processes across the cybersecurity ecosystem.
• Collaborate with SOC, IR, threat intel, and engineering teams to identify automation opportunities.
• Create playbooks for triage, enrichment, containment, remediation, and reporting.
• Develop custom integrations, APIs, connectors across cloud and enterprise apps; ensure security and reliability.
• Mentor junior engineers and contribute to automation standards and best practices.
• Stay current on threats, automation tech, and cloud-native security capabilities.

Skills

SOAR engineering

Python

PowerShell

JavaScript

Automation development

REST APIs

Education

Bachelor's degree in CS/CE/Cybersecurity/IT/MIS

Tools

Palo Alto Cortex XSOAR

Microsoft Sentinel Automation

Splunk SOAR (Phantom)

Chronicle SOAR

Tines

D3 Security

Swimlane

Job description

EY is seeking a Senior SOAR Engineer to design and implement security automation that accelerates threat response and improves efficiency. You will build scalable playbooks, integrate SIEM/EDR/IAM and cloud tools, and work across SOC, IR, and engineering teams.

You’ll apply Python/PowerShell/JavaScript skills to create reliable automation across cloud and on‑prem environments, while guiding junior engineers and advancing engineering best practices.