Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting
or drop it." So location is minor metadata; we can include a short p at top maybe. Then paragraphs: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." Then "The Opportunity" paragraph: "In a rapidly evolving cybersecurity landscape...". That's about the role. Could be under About the role. Then "Your Key Responsibilities" heading with list of responsibilities. We'll put under Responsibilities section. Then "Skills And Attributes For Success" -> Skills section. Then "To Qualify for the Role, You Must Have:" -> Requirements or Qualifications? Usually Requirements. We'll put under Requirements. Then "Ideally, You'll Also Have ..." maybe also under Requirements or Qualifications? Could be Qualifications (preferred). We'll treat as Qualifications. Then "What We Look For" maybe also Skills? Could be part of Skills or maybe separate but we can incorporate into Skills. Then "What We Offer You At EY..." includes benefits and salary range. So Benefits and Pay sections. Schedule not mentioned, so omit. We must not include sections with placeholder text like "commensurate with experience". Not present. We need to ensure we don't include boilerplate like EEO, equal opportunity, scam warning, application instructions, etc. At the end there is a lot of EEO and accommodation text; we must remove. Also remove "Learn more at ey.com/us/careers." maybe part of benefits? It's a link; could be considered boilerplate? It's not EEO but maybe still part of "What We Offer". Might keep as part of benefits? It's a generic link; maybe drop as it's not substantive. Safer to drop. Also remove "Are you ready to shape your future with confidence? Apply today." etc. That's application instruction; drop. Also remove "To make the most of your application experience, please limit yourself to two applications within a six-month period." etc. Drop. Also remove "EY accepts applications for this position on an on-going basis." etc. Drop. Also remove "For those living in California, please click here for additional information." Drop. Also remove the long EEO paragraph and accommodation details. Drop. Also remove the final paragraphs about EY building a better working world etc. That's boilerplate; drop. Thus we keep: - Location short p maybe. - About the role: combine the initial paragraph and The Opportunity paragraph. - Responsibilities: list from "Your Key Responsibilities" bullet points (the paragraph after that heading). It's a long paragraph with many responsibilities separated by periods. We need to convert to
- items. The instruction: Use
- for any list of duties/requirements/benefits. So we need to split into items. The text is a series of sentences; we can treat each sentence as an item. Must preserve all substantive information; not invent or summarize away detail. So we need to break into logical items.
Let's extract responsibilities sentences:
"You will be responsible for designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations."
"You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem."
"Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions."
"You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows."
"You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications."
"This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures."
"You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements."
"Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice."
"In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions."
"You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering."
That seems comprehensive.
Now Skills And Attributes For Success: list of bullet-like sentences. We'll split similarly.
Sentences:
"Demonstrate advanced problem-solving and critical thinking skills."
"Exhibit strong software engineering and automation development capabilities."
"Foster a collaborative learning environment and mentor junior team members."
"Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration."
"Demonstrate experience designing scalable and maintainable integrations across complex technology environments."
"The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations."
"Adherence to service quality standards and program management requirements."
"The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed."
"Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues."
"The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions."
Also earlier paragraph: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients." That's also part of skills/intro. Could be included as a paragraph
before list. Now Requirements (To Qualify for the Role, You Must Have:). List items: "A Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline." "Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies." "Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages." "Experience developing and consuming REST APIs, web services, SDKs, and custom integrations." "Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows." "Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms." "Understanding of infrastructure, networking, operating systems, and cloud environments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)." "Experience designing, testing, troubleshooting, and maintaining automation workflows in production environments." "Knowledge of secure development principles and software engineering best practices including version control, testing methodologies, and CI/CD concepts." "Relevant industry certifications such as Microsoft Certified: Cybersecurity Architect Expert, Microsoft SC-200, Splunk Core Certified Power User, Security+, CySA+, GSEC, GCIH, Cortex XSOAR Engineer, or similar certifications, or the ability to acquire certification after employment." Now Ideally, You'll Also Have ... (preferred qualifications). We'll put under Qualifications section. List: "Experience architecting enterprise-scale SOAR implementations and security automation programs." "Experience developing custom integrations, reusable automation frameworks, and advanced workflow orchestration solutions." "Familiarity with Infrastructure as Code (IaC) technologies such as Terraform, ARM templates, Bicep, or CloudFormation." "Experience working with DevSecOps, CI/CD pipelines, and cloud-native automation technologies." "The ability to communicate effectively during technical workshops, architecture reviews, client interviews, and executive briefings." "Exemplary writing skills and the ability to communicate complex technical concepts to both technical and non-technical audiences." "The ability to translate operational requirements into automation strategies, technical designs, and implementation roadmaps." "The ability to break down complex engineering challenges into manageable components, estimate level-of-effort, and deliver solutions within tight timelines." "Proficiency with consulting engagement methodologies and approaches, understanding how to align technical solutions with client business objectives." "Familiarity with emerging security automation trends, AI-assisted security operations, and modern cybersecurity technologies." Now Benefits: from "What We Offer You At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers." plus later: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We should keep substantive benefits: professional growth, personal fulfillment, inclusive culture, medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. The "Learn more at ey.com/us/careers." maybe drop as boilerplate. Thus Benefits section:
- Professional growth
- Personal fulfillment
- Inclusive culture
- Medical and dental coverage
- Pension and 401(k) plans
- Wide range of paid time off options Now Pay: salary ranges. We need to include Pay section with the ranges. The posting gives three ranges based on location. We should include that info. Not to invent. So we can list: - New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 - Bay Area California offices – $131,100 to $218,500 - All other offices locations in the US, including Sacramento – $104,800 to $192,200 Also note: "Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography." That's also substantive; we can include as a
after list. Now Schedule: not present, omit. Now About the role: we need a
About the role
and thencontaining the combined paragraphs. We need to ensure we don't repeat job title. Not needed. Now location: we can include a short
at top: "Location: Anywhere in Country". Might be considered minor metadata; we can include as a
. Or drop. The instruction: fold minor metadata into a short
or drop it. So we can include a short p. Now ensure we don't include any boilerplate like EEO etc. Now output only HTML fragment, no /, no markdown fences. Let's construct. Structure:
Location: Anywhere in Country
About the role
- for any list of duties/requirements/benefits. So we need to split into items. The text is a series of sentences; we can treat each sentence as an item. Must preserve all substantive information; not invent or summarize away detail. So we need to break into logical items.
Let's extract responsibilities sentences:
"You will be responsible for designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations."
"You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem."
"Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions."
"You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows."
"You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications."
"This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures."
"You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements."
"Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice."
"In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions."
"You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering."
That seems comprehensive.
Now Skills And Attributes For Success: list of bullet-like sentences. We'll split similarly.
Sentences:
"Demonstrate advanced problem-solving and critical thinking skills."
"Exhibit strong software engineering and automation development capabilities."
"Foster a collaborative learning environment and mentor junior team members."
"Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration."
"Demonstrate experience designing scalable and maintainable integrations across complex technology environments."
"The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations."
"Adherence to service quality standards and program management requirements."
"The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed."
"Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues."
"The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions."
Also earlier paragraph: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients." That's also part of skills/intro. Could be included as a paragraph