Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We need to parse the posting. First, location: "Location: Anywhere in Country". That's metadata; we can put in short
maybe. Then there is introductory paragraph about EY, mission, etc. That's about the role? Could be "About the role" or maybe "About the role" is not present but we can treat as "About the role" section with description. Then "The Opportunity" paragraph: describes role. Could be part of About the role. Then "Your Key Responsibilities" heading: we can map to Responsibilities section. Then "Skills And Attributes For Success": could be Skills section. Then "To Qualify for the Role, You Must Have:" that's Requirements/Qualifications. Could be Requirements (must have) and Qualifications (preferred). The posting also has "Ideally, You'll Also Have ..." which is preferred qualifications. Then "What We Look For": maybe part of Skills or Requirements? Could be omitted as fluff. Then "What We Offer You At EY": includes benefits and salary range. So we can have Benefits and Pay sections. Schedule: not mentioned, so omit. We must not repeat job title as heading. No Job ID. We must not include boilerplate like EEO, legal, etc. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to cut out the "Are you ready to shape your future with confidence? Apply today..." and the rest about applications, EEO, etc. We need to preserve all substantive information. So we need to keep description of role, responsibilities, skills, qualifications, benefits, pay. We need to format with
headings and appropriate - for lists,
for prose.
We need to decide which sections to include.
Potential sections:
- About the role (intro + opportunity)
- Responsibilities (Your Key Responsibilities)
- Requirements (must have)
- Qualifications (Ideally, You'll Also Have)
- Skills (Skills And Attributes For Success) maybe combine with Requirements? But we have both Skills and Requirements. The instruction says use headings for those categories if content exists. We have both.
- Benefits (What We Offer You At EY: medical/dental, pension/401k, paid time off)
- Pay (salary ranges)
We should not include Schedule.
We need to ensure we don't create sections with filler like "commensurate with experience". Not present.
We need to preserve all substantive info: we must not lose any details.
Let's extract content.
First, location: "Location: Anywhere in Country". We'll put in a
maybe.
Then intro: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world."
Then "The Opportunity" paragraph: "In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments."
We can combine these into About the role.
Now Responsibilities: The block starting "Your Key Responsibilities As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering."
We need to turn this into a list? The instruction: Use
- for any list of duties/requirements/benefits. The responsibilities block is prose but contains many duties separated by sentences. Could we convert each sentence into a list item? Probably yes, as it's a list of duties. However we must preserve all substantive information; converting to list is okay as long as we don't lose info. The instruction says use
- for any list of duties/requirements/benefits. So we should output a
with - for each duty. We need to parse sentences.
Let's split by sentences (period). But careful not to break abbreviations like "SOC", "SOAR". We'll approximate.
Sentences:
1. designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations.
2. implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem.
3. collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
4. design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows.
5. leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications.
6. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures.
7. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements.
8. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice.
9. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions.
10. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering.
We could keep as list.
Now Skills And Attributes For Success block: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. Demonstrate advanced problem-solving and critical thinking skills.Exhibit strong software engineering and automation development capabilities.Foster a collaborative learning environment and mentor junior team members.Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration.Demonstrate experience designing scalable and maintainable integrations across complex technology environments.The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.Adherence to service quality standards and program management requirements.The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions."
We need to split into list items. Each sentence separated by period. However there are some missing spaces after periods (e.g., "skills.Exhibit"). We'll handle.
Let's extract sentences:
1. To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills.
2. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients.
3. Demonstrate advanced problem-solving and critical thinking skills.
4. Exhibit strong software engineering and automation development capabilities.
5. Foster a collaborative learning environment and mentor junior team members.
6. Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration.
7. Demonstrate experience designing scalable and maintainable integrations across complex technology environments.
8. The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.
9. Adherence to service quality standards and program management requirements.
10. The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.
11. Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.
12. The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions.
Now Requirements: "To Qualify for the Role, You Must Have:" then list.
Content:
- A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline.
- Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies.
- Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages.
- Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
- Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows.
- Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms.
- Understanding of infrastructure, networking, operating systems, and cloud environments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
- Experience designing, testing, troubleshooting, and maintaining automation workflows in production environments.
- Knowledge of secure development principles and software engineering best practices including version control, testing methodologies, and CI/CD concepts.
- Relevant industry certifications such as Microsoft Certified: Cybersecurity Architect Expert, Microsoft SC-200, Splunk Core Certified Power User, Security+, CySA+, GSEC, GCIH, Cortex XSOAR Engineer, or similar certifications, or the ability to acquire certification after employment.
We can make each bullet a
- .
Now Qual
for prose. We need to decide which sections to include. Potential sections: - About the role (intro + opportunity) - Responsibilities (Your Key Responsibilities) - Requirements (must have) - Qualifications (Ideally, You'll Also Have) - Skills (Skills And Attributes For Success) maybe combine with Requirements? But we have both Skills and Requirements. The instruction says use headings for those categories if content exists. We have both. - Benefits (What We Offer You At EY: medical/dental, pension/401k, paid time off) - Pay (salary ranges) We should not include Schedule. We need to ensure we don't create sections with filler like "commensurate with experience". Not present. We need to preserve all substantive info: we must not lose any details. Let's extract content. First, location: "Location: Anywhere in Country". We'll put in a
maybe. Then intro: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." Then "The Opportunity" paragraph: "In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments." We can combine these into About the role. Now Responsibilities: The block starting "Your Key Responsibilities As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering." We need to turn this into a list? The instruction: Use
- for any list of duties/requirements/benefits. The responsibilities block is prose but contains many duties separated by sentences. Could we convert each sentence into a list item? Probably yes, as it's a list of duties. However we must preserve all substantive information; converting to list is okay as long as we don't lose info. The instruction says use
- for any list of duties/requirements/benefits. So we should output a
- with
- for each duty. We need to parse sentences. Let's split by sentences (period). But careful not to break abbreviations like "SOC", "SOAR". We'll approximate. Sentences: 1. designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. 2. implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. 3. collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. 4. design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. 5. leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. 6. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. 7. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. 8. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. 9. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. 10. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering. We could keep as list. Now Skills And Attributes For Success block: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. Demonstrate advanced problem-solving and critical thinking skills.Exhibit strong software engineering and automation development capabilities.Foster a collaborative learning environment and mentor junior team members.Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration.Demonstrate experience designing scalable and maintainable integrations across complex technology environments.The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.Adherence to service quality standards and program management requirements.The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions." We need to split into list items. Each sentence separated by period. However there are some missing spaces after periods (e.g., "skills.Exhibit"). We'll handle. Let's extract sentences: 1. To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. 2. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. 3. Demonstrate advanced problem-solving and critical thinking skills. 4. Exhibit strong software engineering and automation development capabilities. 5. Foster a collaborative learning environment and mentor junior team members. 6. Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration. 7. Demonstrate experience designing scalable and maintainable integrations across complex technology environments. 8. The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations. 9. Adherence to service quality standards and program management requirements. 10. The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed. 11. Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues. 12. The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions. Now Requirements: "To Qualify for the Role, You Must Have:" then list. Content: - A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. - Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies. - Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages. - Experience developing and consuming REST APIs, web services, SDKs, and custom integrations. - Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows. - Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms. - Understanding of infrastructure, networking, operating systems, and cloud environments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). - Experience designing, testing, troubleshooting, and maintaining automation workflows in production environments. - Knowledge of secure development principles and software engineering best practices including version control, testing methodologies, and CI/CD concepts. - Relevant industry certifications such as Microsoft Certified: Cybersecurity Architect Expert, Microsoft SC-200, Splunk Core Certified Power User, Security+, CySA+, GSEC, GCIH, Cortex XSOAR Engineer, or similar certifications, or the ability to acquire certification after employment. We can make each bullet a
- . Now Qual
- for any list of duties/requirements/benefits. So we should output a