1 day ago
Base Salary
$115k - $134k/yr
Responsibilities
- Design and implement automated containment workflows across SIEM, SOAR, endpoint, identity, network, and cloud security platforms.
- Develop incident response playbooks for endpoint isolation, account restriction, malicious IP blocking, credential containment, and cloud workload quarantine.
- Define automation eligibility, approvals, rollback procedures, exception handling, and human-in-the-loop controls.
- Architect an agentic SOC roadmap with security agents, orchestration workflows, and MCP integrations.
- Build secure integrations among security platforms, AWS services, case-management systems, and enterprise APIs using Python.
- Develop cloud-native security automation using AWS, EKS, Terraform, and related platform services.
- Validate response workflows through testing, Purple Team exercises, and incident response simulations.
- Create metrics, dashboards, architecture documentation, runbooks, support procedures, and knowledge-transfer materials for operational transition.
Requirements
- 8+ years of experience in cybersecurity engineering, security operations, cloud security, incident response, or security automation.
- Strong hands-on expertise with AWS security services, cloud-native architecture, and enterprise security operations.
- Experience designing automated incident response and containment workflows across SIEM, SOAR, EDR, IAM, network, and cloud platforms.
- Strong programming and automation skills using Python, APIs, and event-driven integration patterns.
- Hands-on Terraform and Infrastructure as Code experience for secure, repeatable cloud deployments.
- Experience with AWS EKS, containerized workloads, Kubernetes security, and cloud workload containment.
- Understanding of agentic SOC architectures, AI-enabled security workflows, MCP integrations, and human-in-the-loop controls.
- Experience with Git-based development and CI/CD tools such as Bitbucket or equivalent platforms.
- Knowledge of incident response, Purple Team testing, approval controls, rollback mechanisms, and exception management.
- Strong architecture, troubleshooting, documentation, stakeholder communication, and operational transition skills.
Benefits
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee Stock Purchase Plan.
- Eligible for Cognizant’s discretionary annual incentive program based on performance and applicable plan terms.
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.