19 hours ago
Chennai, IndiaSenior / Staff+
Responsibilities
- Design scalable security architectures integrating Palo Alto Cortex XDR, XSOAR, and XSIAM.
- Develop automation scripts and workflows for incident response, alert enrichment, data collection, and ticket lifecycle actions.
- Create API security models covering authentication, authorization, encryption, monitoring, and compliance controls.
- Configure and optimize Cortex XDR policies, analytic rules, response playbooks, and XSOAR integrations.
- Design XSIAM data-ingestion and correlation strategies across diverse telemetry sources.
- Document high- and low-level designs, data flows, integration patterns, and configuration guidance.
- Collaborate with stakeholders to translate business objectives and risk appetite into security architecture requirements and roadmaps.
- Review incident trends, platform metrics, and analyst feedback to improve detection and response use cases.
- Support integrations and deployments through configuration reviews, quality checks, and secure implementation guidance.
- Mentor teammates, share knowledge, and evaluate Palo Alto security-platform enhancements.
Requirements
- Strong hands-on experience with Palo Alto Cortex XSIAM.
- Excellent expertise in correlation-rule and use-case development.
- Experience with SIEM, SOAR, and data-pipeline platforms.
- Strong knowledge of threat detection and incident response, including SOC operations and response actions.
- Understanding of network, endpoint, cloud, and identity security concepts.
- Proficiency in security playbook development and automation.
- Familiarity with the MITRE ATT&CK framework and security architecture best practices.
- Experience with Python or another scripting language and hands-on REST API integrations.
- At least nine years of progressive security or architecture experience, preferably up to twelve years, including experience designing integrated security-platform solutions.
- Ability to work effectively in a hybrid model through communication, collaboration, and reliable documentation.
- Preferred certifications include a Palo Alto Networks security certification and CISSP or an equivalent cybersecurity credential.
Benefits
- Hybrid work arrangement is stated.
- Preferred Palo Alto Networks security certification and CISSP or equivalent cybersecurity credential are supported qualifications.
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.