Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Senior - Consulting
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Remove boilerplate, navigation, legal, EEO, scam warning, duplicated lines, application instructions. We need to preserve all substantive information. Let's parse the posting. Content: - Location: Anywhere in Country (maybe not needed? It's metadata; we can fold minor metadata into a short
or drop it. It says "Location: Anywhere in Country". Could be considered minor metadata; we can include a short
maybe. - Intro paragraph: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." - "The Opportunity" paragraph: description of role. - "Your Key Responsibilities" heading (but we will use
for section headings). We need to include responsibilities as - .
- "Skills And Attributes For Success" heading.
- "To Qualify for the Role, You Must Have:" heading (Qualifications). Also "Ideally, You'll Also Have" maybe part of Qualifications or Skills? We'll treat as Qualifications.
- "What We Look For" maybe part of Skills? Could be considered Skills/Attributes.
- "What We Offer You At EY" includes benefits and salary range. So we need Benefits and Pay sections.
- Also "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." That's benefits.
- Salary range details: multiple ranges based on location.
- Also "Are you ready to shape your future with confidence? Apply today." etc. That's application instructions; we should remove.
- Also "To make the most of your application experience..." etc. Remove.
- Also "EY accepts applications..." etc. Remove.
- Also "For those living in California..." etc. Remove.
- Also "At EY, our values set the foundation..." etc. That's boilerplate/EEO; remove.
- Also "EY | Building a better working world" etc. Remove.
Thus we need sections:
- About the role: maybe combine intro and The Opportunity? Could be a section "About the role". We'll put a
with that content.
- Responsibilities: from "Your Key Responsibilities" paragraph and bullet list (though it's in prose). We'll extract responsibilities as list items.
- Requirements / Qualifications: from "To Qualify for the Role, You Must Have:" and "Ideally, You'll Also Have". We'll combine into Qualifications.
- Skills: from "Skills And Attributes For Success" and "What We Look For". Could be Skills section.
- Benefits: from "What We Offer You At EY" and Total Rewards.
- Pay: salary range details.
- Schedule: not mentioned; we should not include Schedule section if no content.
We must not include empty sections.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep specifics like technologies, years, certifications, etc.
We must not repeat job title as heading.
We need to output only HTML fragment, no /, no markdown fences.
Let's craft.
First, maybe a short
for location: "Location: Anywhere in Country". Could be included as a paragraph before sections.
But the instruction: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." So we can include location as a short
.
Now sections:
About the role
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments.
That seems to capture the intro and opportunity.
Now Responsibilities:
We need to extract list items from the responsibilities paragraph.
Paragraph: "As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering."
We can break into list items each sentence or clause. Let's produce - for each distinct responsibility.
List:
- Designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations.
- Implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem.
- Collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
- Designing and developing playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows.
- Leveraging programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications (including integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms).
- Contributing to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements.
- Mentoring junior team members, providing technical leadership on security automation initiatives, and contributing to the continued growth of the cybersecurity engineering practice.
- Staying current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions.
- Participating in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering.
That seems comprehensive.
Now Skills section: from "Skills And Attributes For Success" and "What We Look For".
Skills paragraph: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. Demonstrate advanced problem-solving and critical thinking skills. Exhibit strong software engineering and automation development capabilities. Foster a collaborative learning environment and mentor junior team members. Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration. Demonstrate experience designing scalable and maintainable integrations across complex technology environments. The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations. Adherence to service quality standards and program management requirements. The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed. Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues. The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions."
What We Look For: "We seek top performers with a passion for cybersecurity engineering and automation, combined with a proven track record of delivering innovative technical solutions. Ideal candidates are individuals who demonstrate strong engineering expertise, learning agility, critical thinking, and the ability to work collaboratively in a fast-paced environment. We value professionals who are motivated by solving complex challenges, improving security operations through automation, and helping clients strengthen their cyber defenses through modern engineering practices."
We can combine into list items.
List:
- Advanced technical engineering expertise, security operations knowledge, and strong consulting skills.
- Advanced problem-solving and critical thinking skills.
- Strong software engineering and automation development capabilities.
- Ability to foster a collaborative learning environment and mentor junior team members.
- Ability to identify and communicate opportunities to improve security operations through automation and orchestration.
- Experience designing scalable and maintainable integrations across complex technology environments.
- Ability to create and deliver high-quality work products, technical documentation, client reports, and presentations.
- Adherence to service quality standards and program management requirements.
- Ability to work collaboratively in a cross-functional, culturally diverse, and geographically dispersed team.
- Strong analytical and troubleshooting skills, with ability to diagnose and resolve complex integration and workflow issues.
- Ability to balance security, operational efficiency, and engineering best practices when developing automation solutions.
- Passion for cybersecurity engineering and automation with a proven track record of delivering innovative technical solutions.
- Strong engineering expertise, learning agility, critical thinking, and ability to work collaboratively in a fast-paced environment.
- Motivation to solve complex challenges, improve security operations through automation, and help clients strengthen cyber defenses via modern engineering practices.
Now Qualifications: from "To Qualify for the Role, You Must Have:" and "Ideally, You'll Also Have".
Qualifications mandatory:
- Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline.
- Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies.
- Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages.
- Experience developing and consuming REST APIs, web services, SDKs, and custom integrations.
- Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows.
- Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms.
- Understanding of
with that content. - Responsibilities: from "Your Key Responsibilities" paragraph and bullet list (though it's in prose). We'll extract responsibilities as list items. - Requirements / Qualifications: from "To Qualify for the Role, You Must Have:" and "Ideally, You'll Also Have". We'll combine into Qualifications. - Skills: from "Skills And Attributes For Success" and "What We Look For". Could be Skills section. - Benefits: from "What We Offer You At EY" and Total Rewards. - Pay: salary range details. - Schedule: not mentioned; we should not include Schedule section if no content. We must not include empty sections. We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep specifics like technologies, years, certifications, etc. We must not repeat job title as heading. We need to output only HTML fragment, no /, no markdown fences. Let's craft. First, maybe a short
for location: "Location: Anywhere in Country". Could be included as a paragraph before sections. But the instruction: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." So we can include location as a short
. Now sections:
About the role
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. In a rapidly evolving cybersecurity landscape, organizations are facing increasingly sophisticated threats while simultaneously managing growing security operations workloads. Clients across industries look to us for innovative solutions that improve efficiency, enhance visibility, and strengthen cyber resilience through automation and orchestration. Join our dynamic team as a Senior SOAR Engineer, where you'll play a key role in designing, implementing, and optimizing security automation solutions that enable organizations to respond to threats faster and more effectively. You will work closely with security operations, incident response, threat detection, and engineering teams to automate repetitive tasks, orchestrate complex workflows, and integrate a wide range of security technologies. Your expertise in security automation, scripting, and platform engineering will help clients mature their security operations, reduce response times, and maximize the value of their cybersecurity investments.
That seems to capture the intro and opportunity. Now Responsibilities: We need to extract list items from the responsibilities paragraph. Paragraph: "As a Senior on the Security Orchestration, Automation and Response (SOAR) team, your key responsibilities would include designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. You will be responsible for implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. Your role will involve collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. You will design and develop playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. You will leverage programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications. This may include integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms to facilitate seamless orchestration across complex security architectures. You will also contribute to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. Additionally, as a senior engineer, you will mentor junior team members, provide technical leadership on security automation initiatives, and contribute to the continued growth of the cybersecurity engineering practice. In addition to these responsibilities, you will be expected to stay current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. You will actively participate in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering." We can break into list items each sentence or clause. Let's produce- for each distinct responsibility. List: - Designing, developing, and maintaining automated security workflows that enhance the effectiveness and efficiency of security operations. - Implementing and optimizing SOAR platforms by integrating security tools, data sources, and operational processes across the cybersecurity ecosystem. - Collaborating with Security Operations Center (SOC), Incident Response, Threat Intelligence, Detection Engineering, and Vulnerability Management teams to identify automation opportunities and translate operational requirements into scalable technical solutions. - Designing and developing playbooks that automate incident triage, enrichment, containment, remediation, and reporting activities while ensuring reliability, maintainability, and security of automation workflows. - Leveraging programming and scripting languages to develop custom integrations, APIs, connectors, and automation capabilities across cloud environments, security platforms, and enterprise applications (including integrating SIEM, EDR, IAM, cloud security, threat intelligence, ticketing, and collaboration platforms). - Contributing to the development of automation standards, reusable frameworks, and engineering best practices while assisting clients with SOAR platform deployments, upgrades, and operational enhancements. - Mentoring junior team members, providing technical leadership on security automation initiatives, and contributing to the continued growth of the cybersecurity engineering practice. - Staying current on emerging cybersecurity threats, automation technologies, cloud-native security capabilities, and evolving SOAR solutions. - Participating in professional development opportunities, industry forums, technical communities, and relevant training to maintain expertise in modern security operations and automation engineering. That seems comprehensive. Now Skills section: from "Skills And Attributes For Success" and "What We Look For". Skills paragraph: "To thrive in this role, you'll need a combination of advanced technical engineering expertise, security operations knowledge, and strong consulting skills. Your professional knowledge and experience will guide you in designing scalable solutions, solving complex technical challenges, and delivering high-quality outcomes for clients. Demonstrate advanced problem-solving and critical thinking skills. Exhibit strong software engineering and automation development capabilities. Foster a collaborative learning environment and mentor junior team members. Possess the ability to identify and communicate opportunities to improve security operations through automation and orchestration. Demonstrate experience designing scalable and maintainable integrations across complex technology environments. The ability to create and deliver high-quality work products, technical documentation, client reports, and presentations. Adherence to service quality standards and program management requirements. The ability to work collaboratively in a cross-functional team environment that is culturally diverse and geographically dispersed. Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex integration and workflow issues. The ability to balance security, operational efficiency, and engineering best practices when developing automation solutions." What We Look For: "We seek top performers with a passion for cybersecurity engineering and automation, combined with a proven track record of delivering innovative technical solutions. Ideal candidates are individuals who demonstrate strong engineering expertise, learning agility, critical thinking, and the ability to work collaboratively in a fast-paced environment. We value professionals who are motivated by solving complex challenges, improving security operations through automation, and helping clients strengthen their cyber defenses through modern engineering practices." We can combine into list items. List: - Advanced technical engineering expertise, security operations knowledge, and strong consulting skills. - Advanced problem-solving and critical thinking skills. - Strong software engineering and automation development capabilities. - Ability to foster a collaborative learning environment and mentor junior team members. - Ability to identify and communicate opportunities to improve security operations through automation and orchestration. - Experience designing scalable and maintainable integrations across complex technology environments. - Ability to create and deliver high-quality work products, technical documentation, client reports, and presentations. - Adherence to service quality standards and program management requirements. - Ability to work collaboratively in a cross-functional, culturally diverse, and geographically dispersed team. - Strong analytical and troubleshooting skills, with ability to diagnose and resolve complex integration and workflow issues. - Ability to balance security, operational efficiency, and engineering best practices when developing automation solutions. - Passion for cybersecurity engineering and automation with a proven track record of delivering innovative technical solutions. - Strong engineering expertise, learning agility, critical thinking, and ability to work collaboratively in a fast-paced environment. - Motivation to solve complex challenges, improve security operations through automation, and help clients strengthen cyber defenses via modern engineering practices. Now Qualifications: from "To Qualify for the Role, You Must Have:" and "Ideally, You'll Also Have". Qualifications mandatory: - Bachelor’s degree (4-year degree) in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, along with 2-4 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. - Hands-on experience implementing, administering, or developing solutions within enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR (Phantom), Google Security Operations (Chronicle SOAR), Tines, D3 Security, Swimlane, or similar technologies. - Strong software development and scripting experience using languages such as Python, PowerShell, JavaScript, or other automation-focused programming languages. - Experience developing and consuming REST APIs, web services, SDKs, and custom integrations. - Knowledge of security operations processes including alert triage, incident response, threat detection, vulnerability management, and case management workflows. - Experience integrating cybersecurity technologies such as SIEM, EDR/XDR, IAM, email security, network security, cloud security, vulnerability management, threat intelligence, and ticketing platforms. - Understanding of