Security Automation & Orchestration Engineer

Cognizant; United States; On-site; USD 115,000 - 134,000; Full time

Benefits offered by this job

401(k) plan

Disability insurance

Employee stock purchase plan

Job summary

Cognizant is seeking an Automation / Orchestration / Security Engineer to design, build, and maintain security automation solutions. You will work with Security Operations, Incident Response, IT, and Cloud teams to automate workflows and enforce scalable, auditable security processes.

The role emphasizes governance, RBAC, and secure coding, with collaboration across SOC, Infra, and Engineering groups. Visa sponsorship is not available.

Qualifications

• 3+ years of Automation/Security Engineering experience.
• Experience with automation/orchestration platforms listed.
• Hands-on with REST APIs, JSON, webhooks, OAuth2, mutual TLS.
• Working knowledge of SIEM, IAM, cloud/security fundamentals.
• Git workflows, code reviews, and testing practices.
• Strong documentation and stakeholder communication.

Responsibilities

• Design and deliver security automation to improve response times.
• Develop SOAR playbooks for alert triage and remediation.
• Build integrations with SIEM, EDR/XDR, IAM, and cloud security tools via APIs.
• Create reusable automation components with logging and observability.
• Automate procedures with SOC and Incident Response teams.
• Implement governance controls including RBAC and audit logs.
• Collaborate with infra and engineering teams on policy-as-code and hardening.
• Support incident response with automation and evidence collection.
• Ensure secure coding practices and safe workflows.
• Document procedures, runbooks, and knowledge materials.

Skills

Automation engineering

Security engineering

Security operations engineering

Ansible

Itential

VMware Aria Orchestrator

REST APIs

JSON

Webhooks

OAuth2

Mutual TLS

SIEM

IAM

Git workflows

Documentation

Tools

Ansible

Itential

VMware Aria Orchestrator

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

The Automation / Orchestration / Security Engineer is responsible for designing, building, and maintaining security automation and orchestration solutions to improve security operations, reduce manual effort, and enhance response efficiency. The role works closely with Security Operations, Incident Response, IT, and Cloud/Platform teams to integrate tools, automate workflows, and implement scalable, auditable security processes.

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

In this role, you will:

• Design and deliver security automation and orchestration capabilities to improve response times and operational efficiency.
• Develop and maintain SOAR playbooks for alert triage, enrichment, containment, remediation, and response workflows.
• Build integrations with security tools including SIEM, EDR/XDR, IAM, vulnerability management, ticketing platforms, and cloud security solutions using APIs, webhooks, and event-driven architectures.
• Create reusable automation components such as scripts, libraries, and templates with proper logging, monitoring, error handling, and observability.
• Work with SOC and Incident Response teams to automate operational procedures and runbooks while implementing approval gates where required.
• Implement governance controls including RBAC, change management, audit logging, and documentation.
• Collaborate with infrastructure and engineering teams to automate security controls, compliance checks, policy-as-code, system hardening, and configuration drift remediation.
• Support incident response activities through automation for evidence collection, containment, and remediation while maintaining logging and chain-of-custody requirements.
• Ensure secure coding practices and implement safeguards to prevent misuse of automation workflows.
• Create and maintain documentation, operating procedures, runbooks, and knowledge transfer materials.

What you need to have to be considered

• 3+ years of experience in Automation Engineering, Security Engineering, Security Operations Engineering, or related roles.
• Experience with automation and orchestration platforms such as Ansible, Itential, VMware Aria Orchestrator, or similar tools.
• Hands-on experience with REST APIs, JSON, webhooks, OAuth2, token-based authentication, and mutual TLS.
• Working knowledge of SIEM concepts including log ingestion, correlation, querying, and SOC operations such as incident triage, escalation, and response.
• Strong understanding of IAM, endpoint security, network security, vulnerability management, and cloud security fundamentals.
• Experience with Git workflows, code reviews, branching strategies, and software testing practices.
• Strong documentation and communication skills with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience with vulnerability management automation, remediation tracking, workflow automation, exception handling, and SLA reporting.
• Cloud security experience across AWS, Azure, and/or GCP.
• Familiarity with container and Kubernetes security.
• Experience integrating and automating actions within EDR/XDR platforms, including endpoint isolation, process termination, and quarantine operations.
• Experience with ITSM and workflow tools such as ServiceNow and Jira.
• Knowledge of structured change management processes.

Applications will be accepted until 16 Sep 2026.

Salary and Other Compensation:

The annual salary for this position is between $[114,500 - 134,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• 401(k) plan and contributions
• Long-term/Short-term Disability
• Employee Stock Purchase Plan

About Cognizant:

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.

Additional employment information

Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.

If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [e-mail] for roles based in the Americas or [e-mail] for roles based in India.