SIEM SOAR Engineer Job Details

About this role

SIEM SOAR Engineer Job Details | EY Cookie information Welcome to the EY careers job search site. This website is based on the SuccessFactors software provided by SAP. On this page, functional and optional cookies are used to improve your experience and design our careers site more user-friendly and in line with your needs. In this context, cookies from providers in third countries may also be used and data may be transmitted to providers such as social media services outside the EU. For this we require your consent. By clicking "Accept All Cookies", you agree to these. This also includes your consent to the transmission of certain personal data to third countries, including the USA, in accordance with Art. 49 (1) (a) GDPR. You can select your settings by clicking “Modify Cookie Preferences” to confirm your choices from the optional cookie tracking and selecting the required cookies required to remain on the site. You can change your selection at any time by clicking the link at the bottom of the page. Modify Cookie Preferences Reject All Cookies Accept All Cookies Skip to main content Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it's like to work here How to join us Job search Experienced professionals Early careers Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it's like to work here How to join us Job search Experienced professionals Early careers Language Deutsch (Deutschland) English (United Kingdom) English (United States) Español (México) Français (Canada) Français (France) עִבְרִית (יִשְׂרָאֵל) 日本語 (日本) 한국어 (대한민국) Português (Brasil) 简体中文 繁體中文 View profile Careers at EY What you can do here What it's like to work here How to join us Job search Experienced professionals Early careers Search by keyword and/or location More options Loading... Business Area All Country/Region All City All   Clear Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Apply now » Apply now Start applying with LinkedIn Apply Now Start Please wait... SIEM SOAR Engineer Location:  Warszawa Other locations:  Anywhere in Country Salary: Competitive Date:  Aug 18, 2026 Job description Requisition ID:  1736483 Join our Cybersecurity Engineering team and help organizations strengthen their security posture through the design, implementation, and optimization of modern SIEM and SOAR platforms. As part of our growing cybersecurity practice, you will work on complex international projects across multiple industries, supporting clients in building mature security operations capabilities, improving threat detection, and automating incident response processes.     EY.AI - in this role, you will work in an environment where AI agents are part of the team and everyday project work. You will use solutions tailored to specific domains that help analyze data, generate recommendations, and design solutions. This enables you to move faster from analysis to action and create competitive advantages for clients.     Your scope of duties: Design and implement enterprise SIEM architectures.   Lead deployments of CrowdStrike NG-SIEM and Splunk solutions.   Onboard security data sources into SIEM ecosystems using native ingestion methods as well as third-party solutions such as Cribl and Apache NiFi .   Develop onboarding strategies and deployment roadmaps for enterprise environments.   Create detection logic, correlation rules, dashboards, and automated queries.   Design and implement automations within enterprise SOAR platforms.   Lead deployments of XSOAR, CrowdStrike Fusion, and Splunk SOAR solutions.   Integrate SIEM platforms and third-party security technologies into SOAR ecosystems.   Fine-tune response workflows and collaborate with SOC teams.   Support clients in improving SIEM and SOAR maturity and transforming their security operations capabilities.   Improve detection coverage and threat visibility across complex IT environments.   Design and implement use cases, detection content, and response automation.   Conduct health assessments and recommend improvements for existing security platforms.   Design integrations using APIs and automation frameworks.   Support platform upgrades, migrations, and cybersecurity transformation initiatives.   Prepare technical documentation, operating procedures, and architecture diagrams.   Advise clients on security best practices and platform optimization.   Participate in projects related to XDR, Security DevOps, AI Security, Cloud Security, and SASE/SSE technologies.     Our requirements: 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security Consulting.   Hands-on experience with at least one of the following solutions: CrowdStrike NG-SIEM, Splunk, XSOAR, Cribl, or Apache NiFi .   Strong understanding of cybersecurity operations and threat detection principles.   Experience with SIEM, SOAR, Data Ingestion, or SOC technologies.   Knowledge of incident detection and response processes.   Understanding of network security concepts and common attack techniques.   Experience integrating security technologies and working with APIs.   Knowledge of Windows, Linux, and cloud environments.   Ability to analyze security events and design detection logic.   Strong communication and stakeholder management skills.   Very good command of English and Polish (B2/C1 level).     We will also appriciate: Experience designing security architectures and large-scale security deployments.   Experience with cloud security technologies (Azure, AWS, GCP).   Knowledge of XDR and Detection Engineering.   Experience with AI Security solutions and governance frameworks.   Experience with SASE/SSE technologies, such as Zscaler.   Familiarity with PowerShell and Python scripting.   Industry certifications such as CrowdStrike, Microsoft Security (SC-200, SC-100, AZ-500), Splunk, CISSP, GCIH, GCIA, or Security+.     What we offer: Participation in complex international cybersecurity implementation and transformation projects.   Exposure to a wide range of technologies and cybersecurity domains, allowing you to build your own career path.   Opportunity to gain hands-on experience with enterprise-level cybersecurity tools and platforms.   Personalized training programs and learning paths.   Participation in a professional development program.   Flexible working model, including hybrid and remote work options depending on project requirements.   Locations: Warsaw, Lodz, Wroclaw, Gdansk, and other EY offices in Poland.   Professional and financial support in obtaining recognised qualifications and certificates.   EY Badges - global certification of your competencies and the opportunity to earn an MBA title from the prestigious Hult International School of Business.   Career Counselor - professional, one- to -one guidance on career building and development.   Psycho-educational platform - a package of free consultations with specialists in the broad field of mental health and personal development and access to educational activities.   Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, sports cards and much more (available online and offline).     Recruitment stages: 1. Apply. If this is your first time applying, create your profile and upload your CV.   2. Let's talk. You will meet Talent Acquisition specialists and members of your future team.     About EY Poland   We are a global consulting and technology company.   We make a difference by transforming services, products, organisations , and even the rules of the game. We combine business expertise , technology, artificial intelligence, and human talent to help organisations solve complex problems, make better decisions, and implement positive change.   We provide confidence in data, opinions, standards, technologies, and security.   Every day we take on challenges, analyse opportunities, prompt, research, collaborate, ask better questions, plan, model, code, experiment, and learn, creating solutions that are critical for our clients.   This is a place where lifelong friendships, professional relationships, and unforgettable experiences are built. This is where you work on meaningful and challenging projects alongside supportive and exceptional people.   We employ more than 390,000 professionals in over 150 countries worldwide. In Poland, our team of over 7,000 people works in Warsaw, Gdansk, Katowice, Krakow, Lodz, Poznan, Rzeszow, and Wroclaw, as well as in the Global Delivery Services centres in Warsaw and Wroclaw.   We care about the environment, not only the business one. As part of our sustainability commitments, we have reduced our global greenhouse gas emissions by 40% compared to our 2019 baseline.     EY is an equal  opportunity employer. We value and promote diversity of knowledge, experience, and perspectives across our community. We foster an environment built on respect, openness, and collaboration, where everyone can grow and make a meaningful impact. Through our "Higher Level Without Barriers" programme , we support employees with disabilities in achieving their professional ambitions and goals.   EY provides equal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, national origin, disability, or any other legally protected characteristic, in accordance with applicable law.   Apply now » Apply now Start applying with LinkedIn Apply Now Start Please wait... Find similar jobs: Consulting DE, Consulting CN, Consulting CA, Consulting BR, Consulting Connect with us Our locations My EY Site map Legal and privacy Labor condition applications Cookie Consent Manager Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. × Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Show More Details Advertising Cookies Provider Description Enabled AddThis Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provider AddThis LinkedIn LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn. Cookie Policy Cookie Table Privacy Policy Terms and Conditions Consent to cookies from provider LinkedIn Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provider GoogleAnalytics Google Tag Manager Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing, and more. Privacy Policy Terms and Conditions Consent to cookies from provider GoogleTagManager Confirm My Choices Reject All Cookies Accept All Cookies

Skills

• Python
• Aws
• Azure
• Gcp
• Linux
• Sap
• Splunk
• Security
• Devops