{"id":2266378,"url":"https://alion.io/job/ernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior","title":"TC-CS-CDR-SIEM SOAR Platform Engineer-Senior","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":43000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-11T02:00:00Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-11-03T02:08:29Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nSIEM SOAR/Platform Engineer\nThe ideal candidate will have extensive experience with Palo Alto Cortex XSOAR (formerly Demisto) and a strong background in security automation and orchestration.\nKey Responsibilities:\nAutomation Development: Design, develop, and maintain security automation playbooks using XSOAR.\nIntegration: Integrate various security tools and systems with XSOAR to enhance incident response capabilities.\nIncident Response: Collaborate with the SOC team to automate and streamline incident response processes.\nCustom Scripting: Develop custom scripts and integrations using Python or other relevant programming languages.\nMonitoring and Optimization: Continuously monitor and optimize XSOAR playbooks and integrations for performance and effectiveness.\nDocumentation: Create and maintain comprehensive documentation for all automation processes and playbooks.\nTraining: Provide training and support to SOC analysts on the use of XSOAR and automated workflows.\nSkills and Qualifications:\nExperience: 3+ years of experience in security automation and orchestration, with a focus on XSOAR.\nTechnical Expertise: Proficiency in Palo Alto Cortex XSOAR, Python scripting, and integration of security tools.\nSecurity Knowledge: Strong understanding of security operations, incident response, and threat intelligence.\nProblem-Solving: Excellent analytical and problem-solving skills with the ability to troubleshoot complex issues.\nCommunication: Strong verbal and written communication skills to effectively collaborate with team members and stakeholders.\nPreferred Qualifications:\nExperience with other SOAR platforms and SIEM tools.\nRelevant certifications such as CISSP, CEH, or Palo Alto Networks certifications.\nKnowledge of cloud security services and environments (AWS, Azure, GCP).\nAdditional Information:\nWilling to work from ODC as and when required in rotational shift.\nWeekend availability/flexibility to work weekends is a MUST.\nWilling to support US shift (Night shift)\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":2856,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-11T06:34:50Z"}],"visa":[],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.847,"p_room":0.75,"age_days":23,"expected_fill_days":27,"reasons":["conf:3","velocity","win:late","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior","json_url":"https://alion.io/job/ernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior.json","meta":{"generated_at":"2026-11-03T06:25:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8986,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-tc-cs-cdr-siem-soar-platform-engineer-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2266378}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2266378},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}