Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting

We need to output HTML fragment with sections only if real content. Use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have content: The posting includes "The Opportunity" (maybe About the role). There's "Your Key Responsibilities". There's "Skills And Attributes For Success". There's "To Qualify for the Role, You Must Have:" (Qualifications). There's "Ideally, You'll Also Have ..." (maybe additional qualifications). There's "What We Look For" (maybe Skills? but we already have Skills). There's "What We Offer You" includes salary range and benefits (medical, dental, pension, 401k, PTO). So we have Pay (salary range) and Benefits (medical/dental etc). Also maybe "Schedule"? Not present. So we should not include Schedule heading. Also "Benefits" heading only if we have benefits content. We have medical/dental coverage, pension and 401(k) plans, paid time off options. So we can include Benefits. We need to avoid repeating job title as heading. No Job ID. Remove boilerplate: cookie/navigation/legal/EEO etc. Remove duplicated lines. Remove application instructions. So we should strip out lines like "Are you ready to shape your future with confidence? Apply today..." etc. Also remove "To make the most of your application experience..." etc. Also remove EEO statement at end. Also remove "EY | Building a better working world" etc. Also remove "EY provides equal employment opportunities..." etc. Also remove "If you have a disability..." etc. We need to preserve all substantive information: location (Anywhere in Country) maybe we can include as a short paragraph? The instruction: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." Location is minor metadata; we can include in a short p at top maybe. But we need to preserve all substantive information; location is substantive? It says "Location: Anywhere in Country". That's a location detail. We'll include a

maybe. We need sections: About the role (maybe from "The Opportunity" paragraph). Responsibilities (Your Key Responsibilities). Qualifications (To Qualify for the Role, You Must Have: plus maybe also "Ideally, You'll Also Have..." could be part of Qualifications or separate? Could combine into Qualifications. Skills (Skills And Attributes For Success). Benefits (What We Offer You includes benefits). Pay (salary range). Possibly also "What We Look For" could be part of Skills or Qualifications but we already have Skills. Might be redundant. We could incorporate into Skills or Qualifications but better to keep Skills section as given. "What We Look For" is more about desired traits; could be part of Skills but we already have Skills And Attributes For Success. Might be similar; we could merge but instruction: prefer few substantive sections over many thin ones. So we could combine Skills And Attributes For Success and What We Look For into a single Skills section. But we need to preserve all info; we can combine them. Similarly, Qualifications could combine the Must Have and Ideally sections. Let's extract content. About the role: The paragraph starting "The Opportunity In a rapidly evolving cybersecurity landscape..." up to "Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments." That's about the role. Responsibilities: The bullet list under "Your Key Responsibilities". It's a paragraph with many sentences; we can convert to

• items. Need to split into list items. The text includes multiple responsibilities separated by periods. We'll need to parse into sensible items. Let's list them: - designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. - implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. - collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. - designing and developing playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. - leveraging programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications (may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures). - contributing to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. - as a senior engineer, mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. - stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. - actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering. We'll make each a
• . Skills And Attributes For Success: list of bullet-like sentences. We'll extract each as
• : - Demonstrate advanced problem-solving and critical thinking skills. - Exhibit strong software engineering and automation development capabilities. - Foster a collaborative learning environment and mentor junior team members. - Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration. - Demonstrate experience designing scalable and maintainable integrations across complex technology environments. - The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations. - Adherence to service quality standards and program management requirements. - The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed. - Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues. - The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions. What We Look For: similar traits; we could merge but maybe we can add as additional items under Skills. Let's extract: - We seek top performers with a passion for cybersecurity engineering and automation, combined with a proven track record of delivering innovative technical solutions. - Ideal candidates are individuals who demonstrate strong engineering expertise, learning agility, critical thinking, and the ability to work collaboratively in a fast-paced environment. - We value professionals who are motivated by solving complex challenges, improving security operations through automation, and helping clients strengthen their cyber defenses through modern engineering practices. We could add these as
• under Skills. Qualifications (Must Have): list: - A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. - Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies. - Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages. - Experience developing and consuming REST APIs, web services, SDKs, and custom integrations. - Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows. - Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms. - Understanding of infrastructure, networking, operating systems, and cloud environments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). - Experience designing, testing, troubleshooting, and maintaining automation workflows in production environments. - Knowledge of secure development principles and software engineering best practices including version control, testing methodologies, and CI/CD concepts. - Relevant industry certifications such as Microsoft Certified: Cybersecurity Architect Expert, Microsoft SC-200, Splunk Core Certified Power User, Security+, CySA+, GSEC, GCIH, Cortex XSOAR Engineer, or similar certifications, or the ability to acquire certification after employment. Ideally, You'll Also Have: list: - Experience architecting enterprise-scale SOAR implementations and security automation programs. - Experience developing custom integrations, reusable automation frameworks, and advanced workflow orchestration solutions. - Familiarity with Infrastructure as Code (IaC) technologies such as Terraform, ARM templates, Bicep, or CloudFormation. - Experience working with DevSecOps, CI/CD pipelines, and cloud-native automation technologies. - The ability to communicate effectively during technical workshops, architecture reviews, client interviews, and executive briefings. - Exemplary writing skills and the ability to communicate complex technical concepts to both technical and non-technical audiences. - The ability to translate operational requirements into automation strategies, technical designs, and implementation roadmaps. - The ability to break down complex engineering challenges into manageable components, estimate level-of-effort, and deliver solutions within tight timelines. - Proficiency with consulting engagement methodologies and approaches, understanding how to align technical solutions with client business objectives. - Familiarity with emerging security automation trends, AI-assisted security operations, and modern cybersecurity technologies. We can combine both under Qualifications. What We Offer You: includes salary range and benefits. We'll separate Pay and Benefits. Pay: The salary range details: "The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography." We'll put that as

  under Pay heading. Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We'll put that as

  under Benefits heading. We also have location: "Location: Anywhere in Country". We'll put as a short

  before sections maybe. We must not include any boilerplate like EEO, application instructions, etc. Now produce HTML fragment: start with maybe

  Location: Anywhere in Country

  then sections. We need to use

  for section headings. Use

  • for lists. Use

    for prose. We must not repeat job title as heading. No markdown. Let's craft. Check for any leftover boilerplate: The "Learn more at ey.com/us/careers." is part of What We Offer You? Actually it's after "Learn more at ey.com/us/careers." That's a link; we can keep as part of What We Offer You? It's not salary or benefits but maybe part of offer. Could include as a sentence in Benefits or separate? It's not required but we can keep as part of What We Offer You (maybe under Benefits). But it's not a benefit; it's a link. Might be considered boilerplate? It's not navigation/legal/EEO. It's a career link. Might be okay to keep. But we can drop as it's not substantive? It's minor. Safer to drop. Also "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture." That's part of What We Offer You; we can keep as part of Benefits or maybe as a separate paragraph under Benefits. It's substantive about culture. We'll include under Benefits. Thus Benefits