Jobs · Utah

Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting

EY · Salt Lake City, UT · 1 mo ago
Hybrid$126k–$210k/yrFull-time
We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Remove boilerplate, navigation, legal, EEO, etc. Must preserve all substantive info. We need to parse the posting. Key parts: Location: Anywhere in Country (maybe not needed). At EY, we’re all in to shape your future with confidence... (intro paragraph). The Opportunity paragraph. Then "Your Key Responsibilities" with bullet list (actually paragraphs). Then "Skills And Attributes For Success" with bullet list. Then "To Qualify for the Role, You Must Have:" with bullet list. Then "Ideally, You'll Also Have" bullet list. Then "What We Look For" paragraph. Then "What We Offer You At EY" paragraph with salary ranges and benefits. Then "Are you ready..." etc (call to action) - we should remove application instructions. Also remove "Learn more at ey.com/us/careers." maybe part of offer? It's generic but maybe keep as part of offer? It's not boilerplate? It's a link; but we can keep as part of offer? Might be considered generic but not EEO. Probably safe to keep as part of offer? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The "Learn more at ey.com/us/careers." is not exactly boilerplate but could be considered generic marketing; but it's part of offer. I'd keep it. Salary range details: we need a Pay section if posting actually states them. Yes, they have salary ranges. So include Pay section with that info. Benefits: they mention Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. So Benefits section. Schedule: not mentioned. So omit Schedule. About the role: we have introductory paragraphs about EY and the Opportunity. Could be "About the role" or maybe we combine into About the role. The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need to decide which headings to use. We have Responsibilities, Skills And Attributes For Success (maybe Skills), Qualifications (maybe Requirements/Qualifications). The posting has "To Qualify for the Role, You Must Have:" which is qualifications. Also "Ideally, You'll Also Have" could be additional qualifications or preferred qualifications. Could combine into Qualifications section. We also have "What We Look For" maybe could be Skills? But we already have Skills And Attributes For Success. Could treat that as Skills section. We need to avoid thin sections. So we can have: - About the role (intro + Opportunity) - Responsibilities - Skills (Skills And Attributes For Success) - Qualifications (To Qualify... + Ideally...) - Benefits - Pay We should not include Requirements separate if we combine into Qualifications. We must preserve all substantive info. So we need to include all bullet points from each section. We need to format lists using
  • . For prose use

    . We must not repeat job title as heading. No Job ID. We must not include filler like "commensurate with experience". Not present. We must not include application instructions: "Are you ready to shape your future with confidence? Apply today." etc. Also "To make the most of your application experience..." etc. So remove those lines. Also remove EEO statements at end. We must also remove duplicated lines. Let's extract content. Intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." That's location line maybe we can drop location? It's minor metadata; we can fold into short

    or drop. Probably we can include location in a short p. Then "The Opportunity" paragraph: "In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments." That's substantive. Now Responsibilities: The section "Your Key Responsibilities As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering." We need to turn this into bullet list? The instruction: Use

    • for any list of duties/requirements/benefits. The responsibilities are a paragraph with many duties separated by sentences. Could we treat each sentence as a list item? Probably yes, to follow rule: any list of duties -> use ul li. So we need to split into items. Similarly Skills And Attributes For Success: list of bullet-like sentences separated by periods. We'll split. Qualifications: "To Qualify for the Role, You Must Have:" then bullet list of items separated by line breaks? In text they are separated by periods but we can split. "Ideally, You'll Also Have" similarly. We need to preserve all info; we can combine both qualification lists into one Qualifications section, maybe with two sublists? But we can just make one list containing all items from both. But we must not lose the distinction? Not required. Now Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." Also maybe earlier "Learn more at ey.com/us/careers." but that's not benefit. We'll keep that as part of offer? Might be considered generic but okay. Pay: Salary ranges as given. Now we need to output HTML fragment only. Let's craft. First, maybe a short p for location: "

      Location: Anywhere in Country

      " but location line maybe minor metadata; we can fold into short p or drop. I'd include as p. Then About the role: combine intro and Opportunity into maybe two paragraphs? Could be one

      containing both? Better separate: first paragraph about EY, second about Opportunity. Thus:

      About the role

      At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

      In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments.

      Now Responsibilities:

      Responsibilities

      • Designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations.
      • Implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem.
      • Collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
      • Designing and developing playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows.
      • Leveraging programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications (may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures).
      • Contributing to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements.
      • Mentoring junior team members, providing technical leadership on security automation initiatives, and contributing to the continued growth of the cybersecurity engineering practice.
      • Staying current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions.
      • Actively participating in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering.
      Now Skills:

      Skills

      • Advanced problem-solving and critical thinking skills.
      • Strong software engineering and automation development capabilities.
      • Foster a collaborative learning environment and mentor junior team members.
      • Ability to identify and communicate opportunities to improve security operations through automation and orchestration.
      • Experience designing scalable and maintainable integrations across complex technology environments.
      • Ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.
      • Adherence to service quality standards and program management requirements.
      • Ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed.
      • Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues.
      • Ability to balance security, operational efficiency, and engineering best practices when developing automation solutions.
      Now Qualifications: combine Must Have and Ideally. We need to list

Similar jobs