Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting
EY · Detroit, MI · 1 mo ago
Hybrid$126k–$210k/yrFull-time
We need to output HTML fragment with sections: h3 headings for sections present: About the role? The posting includes "The Opportunity", "Your Key Responsibilities", "Skills And Attributes For Success", "To Qualify for the Role, You Must Have:", "Ideally, You'll Also Have", "What We Look For", "What We Offer You". Also location info: "Location: Anywhere in Country". Also salary range details. Also benefits: "Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options."
We must not repeat job title as heading. No Job ID. Remove boilerplate: EEO, legal, etc. Also remove application instructions like "Apply today", "limit yourself to two applications", etc. Also remove "Learn more at ey.com/us/careers." Also remove "Are you ready to shape your future with confidence?" etc. Also remove "EY | Building a better working world" etc. Also remove "EY provides equal employment opportunities..." etc.
We need to preserve all substantive information. So we need to include location, opportunity description, responsibilities, skills/attributes, qualifications (must have), ideally also have, what we look for, what we offer (salary range, benefits). Also maybe "About the role" not present; we have "The Opportunity". Could map to "About the role"? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings where appropriate. Use those exact headings? It says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings where appropriate. Use those exact headings? It says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Likely we should use those headings if content matches. So we need sections: About the role (maybe from The Opportunity), Responsibilities (Your Key Responsibilities), Requirements (maybe To Qualify for the Role...), Skills (Skills And Attributes For Success), Qualifications (maybe also To Qualify... but we already used Requirements). Could combine. But we need to avoid thin sections. Let's decide:
- About the role: The Opportunity paragraph(s).
- Responsibilities: Your Key Responsibilities.
- Requirements: To Qualify for the Role, You Must Have: (mandatory qualifications).
- Skills: Skills And Attributes For Success.
- Benefits: What We Offer You (including Total Rewards).
- Pay: Salary range details.
- Schedule: Not present, so omit.
We also have "What We Look For" and "Ideally, You'll Also Have". Those could be merged into Skills or Requirements? "What We Look For" is about top performers etc. Could be part of Skills or maybe a separate section like "Desired Qualities". But instruction: only include section when posting has real specific content. We could include a section "Desired Qualities" but not in the list of allowed headings. The allowed headings are examples, not strict? It says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should stick to those. So we can map "What We Look For" into Skills or maybe Requirements. "Ideally, You'll Also Have" could be additional qualifications (preferred). Could be part of Requirements or Skills. We'll incorporate into Requirements as "Preferred qualifications". But we need to preserve all info. We'll include them under Requirements as bullet points maybe.
We'll need to strip fluff like "Join EY and help to build a better working world." That's part of Opportunity? It's generic but maybe keep as it's part of the opportunity description. It's not boilerplate? It's a tagline but could be considered filler. However it's part of the posting; we should preserve substantive information. It's not a list; it's prose. We'll keep.
We need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So remove lines about applying, "Apply today", "limit yourself to two applications", "Learn more at ey.com/us/careers", "Are you ready to shape your future with confidence?", "EY | Building a better working world", all the EEO paragraphs, accommodation info, etc.
Also remove "Location: Anywhere in Country". That's location info; we should keep location but not as heading. Could be a short
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should stick to those. So we can map "What We Look For" into Skills or maybe Requirements. "Ideally, You'll Also Have" could be additional qualifications (preferred). Could be part of Requirements or Skills. We'll incorporate into Requirements as "Preferred qualifications". But we need to preserve all info. We'll include them under Requirements as bullet points maybe. We'll need to strip fluff like "Join EY and help to build a better working world." That's part of Opportunity? It's generic but maybe keep as it's part of the opportunity description. It's not boilerplate? It's a tagline but could be considered filler. However it's part of the posting; we should preserve substantive information. It's not a list; it's prose. We'll keep. We need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So remove lines about applying, "Apply today", "limit yourself to two applications", "Learn more at ey.com/us/careers", "Are you ready to shape your future with confidence?", "EY | Building a better working world", all the EEO paragraphs, accommodation info, etc. Also remove "Location: Anywhere in Country". That's location info; we should keep location but not as heading. Could be a short
at top. Now craft HTML. Structure:
Location: Anywhere in Country
About the role
... (The Opportunity paragraph(s) ...)
Responsibilities
- ... each responsibility bullet ...
- for any list of duties/requirements/benefits. So we should convert the responsibilities into list items. We'll need to parse the responsibilities text and split into logical items.
Responsibilities text:
"As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering."
We can split into maybe 8-9 items.
Similarly Skills And Attributes For Success: list of bullet-like sentences separated by periods. We'll split.
Qualifications (To Qualify for the Role, You Must Have): list of requirements.
Ideally, You'll Also Have: additional preferred qualifications.
What We Look For: descriptive paragraph about top performers.
What We Offer You: includes salary range and benefits.
We need Pay section: salary range details.
We need Benefits section: medical/dental, pension/401k, paid time off.
We'll separate.
Now produce HTML.
We must not include markdown fences.
Let's craft.
First, location paragraph.
Then About the role: combine The Opportunity paragraphs (maybe two paragraphs). The Opportunity text:
"In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments."
We'll keep as
. Now Responsibilities
- .
We'll break sentences:
1. Designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations.
2. Implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem.
3. Collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
4. Designing and developing playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows.
5. Leveraging programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications (may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures).
6. Contributing to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements.
7. Mentoring junior team members, providing technical leadership on security automation initiatives, and contributing to the continued growth of the cybersecurity engineering practice.
8. Staying current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions.
9. Actively participating in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering.
Now Skills And Attributes For Success: list items.
Text: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. Demonstrate advanced problem-solving and critical thinking skills.Exhibit strong software engineering and automation development capabilities.Foster a collaborative learning environment and mentor junior team members.Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration.Demonstrate experience designing scalable and maintainable integrations across complex technology environments.The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.Adherence to service quality standards and program management requirements.The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions."
We need to split into items. Some sentences run together without spaces after periods. We'll manually split.
Items:
- Combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills.
- Professional knowledge and experience guiding design of scalable solutions, solving complex technical challenges, delivering high-quality outcomes for clients.
- Advanced problem-solving and critical thinking skills.
- Strong software engineering and automation development capabilities.
- Foster a collaborative learning environment and mentor junior team members.
- Ability to identify and communicate opportunities to improve security operations through automation and orchestration.
- Experience designing scalable and maintainable integrations across complex technology environments.
- Ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.
- Adherence to service quality standards and program management requirements.
- Ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.
- Strong analytical and troubleshooting skills, with ability to diagnose and resolve complex integration and workflow issues.
- Ability to balance security, operational efficiency, and engineering best practices when developing automation solutions.
Now Requirements (To Qualify for the Role, You Must Have): list items.
Text: "A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant