{"id":2604652,"url":"https://alion.io/job/ey-siem-soar-engineer","title":"SIEM SOAR Engineer","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":91000,"period":"year","method":"role_seniority_country_cell","sample_n":22},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Apache NiFi","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-15T02:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T13:26:15Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Join our Cybersecurity Engineering team and help organizations strengthen their security posture through the design, implementation, and optimization of modern SIEM and SOAR platforms. As part of our growing cybersecurity practice, you will work on complex international projects across multiple industries, supporting clients in building mature security operations capabilities, improving threat detection, and automating incident response processes.\nEY.AI- in this role, you will work in an environment where AI agents are part of the team and everyday project work. You will use solutions tailored to specific domains that help analyze data, generate recommendations, and design solutions. This enables you to move faster from analysis to action and create competitive advantages for clients.\nYour scope of duties:\nDesign and implement enterprise SIEM architectures.\n\nLead deployments of CrowdStrike NG-SIEM and Splunk solutions.\n\nOnboard security data sources into SIEM ecosystems using native ingestion methods as well as third-party solutions such as Cribl and Apache NiFi.\n\nDevelop onboarding strategies and deployment roadmaps for enterprise environments.\n\nCreate detection logic, correlation rules, dashboards, and automated queries.\n\nDesign and implement automations within enterprise SOAR platforms.\n\nLead deployments of XSOAR, CrowdStrike Fusion, and Splunk SOAR solutions.\n\nIntegrate SIEM platforms and third-party security technologies into SOAR ecosystems.\n\nFine-tune response workflows and collaborate with SOC teams.\n\nSupport clients in improving SIEM and SOAR maturity and transforming their security operations capabilities.\n\nImprove detection coverage and threat visibility across complex IT environments.\n\nDesign and implement use cases, detection content, and response automation.\n\nConduct health assessments and recommend improvements forexisting security platforms.\n\nDesign integrations using APIs and automation frameworks.\n\nSupport platform upgrades, migrations, and cybersecurity transformation initiatives.\n\nPrepare technical documentation, operating procedures, and architecture diagrams.\n\nAdvise clients on security best practices and platform optimization.\n\nParticipate in projects related to XDR, Security DevOps, AI Security, Cloud Security, and SASE/SSE technologies.\n\nOur requirements:\n4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.\n\nHands-on experience with at least one of the following solutions: CrowdStrike NG-SIEM, Splunk, XSOAR, Cribl, or Apache NiFi.\n\nStrong understanding of cybersecurity operations and threat detection principles.\n\nExperience with SIEM, SOAR, Data Ingestion, or SOC technologies.\n\nKnowledge of incident detection and response processes.\n\nUnderstanding ofnetwork security concepts and common attack techniques.\n\nExperience integrating security technologies and working with APIs.\n\nKnowledge of Windows, Linux, and cloud environments.\n\nAbility to analyze security events and design detection logic.\n\nStrong communicationand stakeholder management skills.\n\nVery goodcommand of English and Polish (B2/C1 level).\n\nWe will also appriciate:\nExperience designing security architectures and large-scale security deployments.\n\nExperience with cloud security technologies (Azure, AWS, GCP).\n\nKnowledge of XDR and Detection Engineering.\n\nExperience with AI Security solutions and governance frameworks.\n\nExperience with SASE/SSE technologies, such as Zscaler.\n\nFamiliarity with PowerShell and Python scripting.\n\nIndustry certifications such as CrowdStrike, Microsoft Security (SC-200, SC-100, AZ-500), Splunk, CISSP, GCIH, GCIA, or Security+.\n\nWhat we offer:\nParticipation in complex international cybersecurity implementation and transformation projects.\n\nExposure to a wide range of technologies and cybersecurity domains, allowing you to build your own career path.\n\nOpportunity to gain hands-on experience with enterprise-level cybersecurity tools and platforms.\n\nPersonalized training programs and learning paths.\n\nParticipation in a professional development program.\n\nFlexible working model, including hybrid and remote work options depending on project requirements.\n\nLocations: Warsaw, Lodz, Wroclaw, Gdansk, and other EY offices in Poland.\n\nProfessional and financial support in obtaining recognisedqualifications and certificates.\n\nEY Badges - global certification of your competencies and the opportunity to earn an MBA title from the prestigious Hult International School of Business.\n\nCareer Counselor - professional, one-to-one guidance on career building and development.\n\nPsycho-educational platform - a package of free consultations with specialists in the broad field of mental health and personal development and access to educational activities.\n\nBenefitprogrammeoffering private healthcare with additionalpreventive examinations, life insurance, tickets, team sports, sports cards and much more (available online and offline).\n\nRecruitment stages:\n1. Apply. If this is your first time applying, create your profile and upload your CV.\n2. Let'stalk. You will meet Talent Acquisition specialists and members of your future team.\nAbout EY Poland\nWe are a global consulting and technology company.\nWe make a difference by transforming services, products, organisations, and even the rules of the game. We combine business expertise, technology, artificial intelligence, and human talent to help organisationssolve complex problems, make better decisions, and implement positive change.\nWe provide confidence in data, opinions, standards, technologies, and security.\nEvery day we take on challenges, analyseopportunities, prompt, research, collaborate, ask better questions, plan, model, code, experiment, and learn, creating solutions that are critical for our clients.\nThis is a place where lifelong friendships, professional relationships, and unforgettable experiences are built. This is where you work on meaningful and challenging projects alongside supportive and exceptional people.\nWe employ more than 390,000 professionals in over 150 countries worldwide.In Poland, our team of over 7,000 people works in Warsaw, Gdansk, Katowice, Krakow, Lodz, Poznan, Rzeszow, and Wroclaw, as well as in the Global Delivery Services centresin Warsaw and Wroclaw.\nWe care about the environment, not only thebusiness one. As part of our sustainability commitments, we have reduced our global greenhouse gas emissions by 40% compared to our 2019 baseline.\nEY is an equal opportunityemployer. We value and promote diversity of knowledge, experience, and perspectives across our community. We foster an environment built on respect, openness, and collaboration, where everyone can grow and make a meaningful impact. Through our \"Higher Level Without Barriers\" programme, we support employees with disabilities in achieving their professional ambitions and goals.\nEY providesequal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, national origin, disability, or any other legally protected characteristic, in accordance withapplicable law.","description_format":"text","description_chars":7151,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"Polish","level":"Upper-Intermediate (B2)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule","Life insurance","Professional development"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-15T09:16:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":16,"reasons":["conf:4","win:early","comp:brand"],"computed_at":"2026-10-15T17:54:10Z"},"pay":null,"html_url":"https://alion.io/job/ey-siem-soar-engineer","json_url":"https://alion.io/job/ey-siem-soar-engineer.json","meta":{"generated_at":"2026-10-15T17:54:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27063,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-siem-soar-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-siem-soar-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-siem-soar-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-siem-soar-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-siem-soar-engineer"}]}