Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting
About the role
with paragraph(s) from "The Opportunity". Also maybe the initial location line? Could be part of About the role? The location line is "Location: Anywhere in Country". That's minor metadata; we can fold into a shortor drop. Probably include as a short paragraph before sections. - Responsibilities: "Your Key Responsibilities" section. Use
Responsibilities
with- items.
- Requirements/Qualifications: "To Qualify for the Role, You Must Have:" plus maybe "Ideally, You'll Also Have". Could combine into Requirements and Qualifications? The instruction says use headings like Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Skills And Attributes For Success (skills). Also qualifications. We'll need to decide.
We have "Skills And Attributes For Success" -> Skills section.
We have "To Qualify for the Role, You Must Have:" -> Qualifications (or Requirements). Also "Ideally, You'll Also Have" could be additional qualifications or preferred qualifications. Could be part of Qualifications as well.
We have "What We Look For" maybe could be part of Skills or Qualifications? It's more about desired traits. Could be merged into Skills or maybe a separate section like "What We Look For" but not in allowed headings. Probably incorporate into Skills or Qualifications.
We have "What We Offer You": includes salary range and benefits. So we need Benefits and Pay sections. The posting gives salary ranges for different locations. Also mentions Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. So we can create Pay section with salary ranges, and Benefits section with medical/dental, pension/401k, PTO.
Schedule: not mentioned, so omit.
We must not create sections with placeholder text. So only include sections where we have real content.
Thus sections:
- About the role (from The Opportunity paragraph(s))
- Responsibilities (Your Key Responsibilities)
- Skills (Skills And Attributes For Success)
- Qualifications (To Qualify for the Role, You Must Have: plus Ideally, You'll Also Have)
- Benefits (What We Offer You: medical/dental, pension/401k, PTO)
- Pay (What We Offer You: salary ranges)
We need to ensure we don't duplicate content.
We must preserve all substantive information; not invent or summarize away detail. So we need to keep the details as given, but we can format as lists.
We must not include boilerplate like EEO, legal, application instructions, etc. So we must cut out everything after "What We Offer You" that includes EEO etc. Also cut out the "Are you ready to shape your future with confidence? Apply today..." etc. Also cut out the "To make the most of your application experience..." etc. Also cut out the EY values etc. So stop before that.
Thus we need to parse the posting and extract relevant parts.
Let's extract:
Location line: "Location: Anywhere in Country". We'll make a short p.
The Opportunity paragraph(s):
"In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments."
That's the Opportunity.
Your Key Responsibilities: list of responsibilities.
Let's extract bullet points from that paragraph:
- designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations.
- implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem.
- collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
- design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows.
- leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures.
- contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements.
- as a senior engineer, mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice.
- stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions.
- actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering.
We need to keep all details.
Skills And Attributes For Success: list of bullet points.
Extract:
- Demonstrate advanced problem-solving and critical thinking skills.
- Exhibit strong software engineering and automation development capabilities.
- Foster a collaborative learning environment and mentor junior team members.
- Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration.
- Demonstrate experience designing scalable and maintainable integrations across complex technology environments.
- The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.
- Adherence to service quality standards and program management requirements.
- The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.
- Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.
- The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions.
Also earlier paragraph: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients." That's also part of Skills? Could be included as a paragraph before list.
We'll include that as a
then list. Qualifications: "To Qualify for the Role, You Must Have:" list. Extract: - A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. - Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies. - Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages. - Experience developing and consuming REST APIs, web services, SDKs, and custom integrations. - Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows. - Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms. - Understanding of infrastructure, networking, operating systems, and cloud environments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). - Experience designing, testing, troubleshooting, and maintaining automation workflows in production environments. - Knowledge of secure development principles and software engineering best practices including version control, testing methodologies, and CI/CD concepts. - Relevant industry certifications such as Microsoft Certified: Cybersecurity Architect Expert, Microsoft SC-200, Splunk Core Certified Power User, Security+, CySA+, GSEC, GCIH, Cortex XSOAR Engineer, or similar certifications, or the ability to acquire certification after employment. "Ideally, You'll Also Have" list: - Experience architecting enterprise-scale SOAR implementations and security automation programs. - Experience developing custom integrations, reusable automation frameworks, and advanced workflow orchestration solutions. - Familiarity with Infrastructure as Code (IaC) technologies such as Terraform, ARM templates, Bicep, or CloudFormation. - Experience working with DevSecOps, CI/CD pipelines, and cloud-native automation technologies. - The ability to communicate effectively during technical workshops, architecture reviews, client interviews, and executive briefings. - Exemplary writing skills and the ability to communicate complex technical concepts to both technical and non-technical audiences. - The ability to translate operational requirements into automation strategies, technical designs, and implementation roadmaps. - The ability to break down complex engineering challenges into manageable components, estimate level-of-effort, and deliver solutions within tight timelines. - Proficiency with consulting engagement methodologies and approaches, understanding how to align technical solutions with client business objectives. - Familiarity with emerging security automation trends, AI-assisted security operations, and modern cybersecurity technologies. We can combine these into Qualifications (maybe separate Required vs Preferred). But we only have headings: Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could use Qualifications for both required and preferred, or we could split into Requirements (required) and Qualifications (preferred). The instruction says use headings like Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can have both Requirements and Qualifications sections. Let's do: - Requirements: the "To Qualify for the Role, You Must Have:" list. - Qualifications: the "Ideally, You'll Also Have:" list. Skills: from Skills And Attributes For Success. Benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. Pay: salary ranges as given. We need to preserve the exact salary ranges text: "The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography." We should keep that as a paragraph. Now we need to output only HTML fragment, no /, no markdown fences. We'll produce something like:
Location: Anywhere in Country
About the role
In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility