Join EY and embark on a career journey that's as unique as you are. Leverage our global scale, supportive environment, and inclusive culture to reach your full potential. Your distinct perspective is invaluable in helping EY continually improve and contribute to a better working world.

We are seeking an experienced SIEM SOAR Platform Engineer to join our team. The ideal candidate possesses extensive experience with Palo Alto Cortex XSOAR (formerly Demisto) and a robust background in security automation and orchestration.

Key responsibilities include designing, developing, and maintaining security automation playbooks using XSOAR. You will integrate various security tools and systems with XSOAR to enhance incident response capabilities and collaborate with the SOC team to automate and streamline incident response processes.

Further duties involve developing custom scripts and integrations using Python or other relevant programming languages. Continuous monitoring and optimization of XSOAR playbooks and integrations for performance and effectiveness are crucial. You will also be responsible for creating and maintaining comprehensive documentation for all automation processes and playbooks, and providing training and support to SOC analysts on XSOAR usage.

This role requires a minimum of 3 years of experience in security automation and orchestration, with a specific focus on XSOAR. Essential technical expertise includes proficiency in Palo Alto Cortex XSOAR, Python scripting, and the integration of security tools.

A strong understanding of security operations, incident response, and threat intelligence is necessary. Candidates should possess excellent analytical and problem-solving skills with the ability to troubleshoot complex issues effectively. Strong verbal and written communication skills are vital for collaboration with team members and stakeholders.

Preferred qualifications include experience with other SOAR platforms and SIEM tools, relevant certifications such as CISSP, CEH, or Palo Alto Networks certifications, and knowledge of cloud security services (AWS, Azure, GCP). Flexibility for rotational shifts, weekend availability, and support for US night shifts is a mandatory requirement.