Senior SIEM Engineer

Cognizant; Chennai District; Hybrid; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Hybrid Work Model

Job summary

Cognizant is seeking a Senior SIEM Engineer to join its Corporate Security – Global Cyber Operations SIEM Engineering Team in a hybrid role. You will lead platform modernization, design complex log source integrations, and develop automation to boost efficiency. Strong experience with Cribl, Cortex, ELK and scripting is expected.

The role emphasizes collaboration with analysts, engineers, vendors, and stakeholders, with a focus on reliability, data transformation, and operational excellence.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related discipline, or equivalent work experience.
• 6+ years of experience in cybersecurity, SIEM engineering, security monitoring, or log management.
• Strong hands‑on experience administering and supporting SIEM platforms, Cribl, Cortex, and ELK Stack.
• Experience with platform troubleshooting, upgrades, patching, change management, and root cause analysis.
• Strong expertise in log source integrations, data ingestion pipelines, and data transformation workflows.
• Proficiency in scripting languages such as Python and Bash, with experience driving automation initiatives.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent communication and collaboration skills across technical and non‑technical teams.
• Ability to work independently, manage competing priorities, and thrive in a fast-paced environment.
• SIEM Administration Certification from any major vendor preferred.

Responsibilities

• Lead platform optimization and modernization initiatives across the SIEM ecosystem, ensuring high availability, performance, and reliability.
• Design, manage, and troubleshoot complex log source integrations, ingestion pipelines, and data transformation workflows.
• Develop automation solutions using scripting and available frameworks to improve operational efficiency and reduce manual effort.
• Manage escalations, audit support activities, major incidents, access requests, and vendor engagements while providing technical guidance to engineering teams.
• Mentor Level 1 engineers through training sessions, knowledge sharing, technical documentation, onboarding materials, SOPs, and troubleshooting playbooks.

Skills

SIEM Administration

Automation scripting

Log source integrations

Incident response

Communication

Independent work

Education

Bachelors in CS/Engineering/Info Security or related

Equivalent work experience

Tools

Cribl

Cortex

ELK Stack

Job description

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth. At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?

About The Role

As a Senior SIEM Engineer, you will drive impactful contributions and focus on outcomes as part of Cognizant’s Corporate Security – Global Cyber Operations SIEM Engineering Team. You will collaborate closely with Level 1 analysts, Level 3 engineers, platform vendors, log source owners, and key business stakeholders to enhance and modernize the organization's SIEM ecosystem. You will have the autonomy to lead troubleshooting efforts, drive platform optimization initiatives, improve operational efficiencies through automation, and support a highly available and reliable security operations environment.

In This Role, You Will

• Lead platform optimization and modernization initiatives across the SIEM ecosystem, ensuring high availability, performance, and reliability.
• Design, manage, and troubleshoot complex log source integrations, ingestion pipelines, and data transformation workflows.
• Develop automation solutions using scripting and available frameworks to improve operational efficiency and reduce manual effort.
• Manage escalations, audit support activities, major incidents, access requests, and vendor engagements while providing technical guidance to engineering teams.
• Mentor Level 1 engineers through training sessions, knowledge sharing, technical documentation, onboarding materials, SOPs, and troubleshooting playbooks.

Embrace our vibrant culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Prioritize quality, stay curious, and commit to continuous learning. Take ownership, build relationships, and focus on personal growth to drive business strategy and foster a high-performance culture.

What You Must Have To Be Considered

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related discipline, or equivalent work experience.
• 6+ years of experience in cybersecurity, SIEM engineering, security monitoring, or log management.
• Strong hands‑on experience administering and supporting SIEM platforms, Cribl, Cortex, and ELK Stack.
• Experience with platform troubleshooting, upgrades, patching, change management, and root cause analysis.
• Strong expertise in log source integrations, data ingestion pipelines, and data transformation workflows.
• Proficiency in scripting languages such as Python and Bash, with experience driving automation initiatives.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent communication and collaboration skills across technical and non‑technical teams.
• Ability to work independently, manage competing priorities, and thrive in a fast‑paced environment.
• SIEM Administration Certification from any major vendor preferred.

These Will Help You Succeed

• Experience supporting enterprise‑scale cybersecurity operations environments.
• Strong understanding of security monitoring, threat detection, and incident response processes.
• Experience collaborating directly with security vendors and influencing product roadmaps.
• Proven track record of leading platform modernization and optimization initiatives.
• Experience driving operational excellence through automation and process improvement.
• Demonstrated ability to mentor and develop junior engineers.
• Passion for continuous improvement, innovation, and knowledge sharing.

Work Model

This role follows a Hybrid Work Model. Based on business requirements, associates may be expected to work from a Cognizant office and collaborate with global teams while supporting operational and engineering activities. The working arrangements for this role are accurate as of the date of posting and may change based on business or client requirements.