Security Orchestration Engineer: Automate & Respond

Cognizant; Oklahoma City (OK); On-site; USD 115,000 - 134,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus PTO

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

The Automation / Orchestration / Security Engineer at Cognizant CIS designs, builds, and maintains security automation to improve response times and reduce manual work. You will collaborate with Security Operations, Incident Response, IT, and Cloud/Platform teams to integrate tools and automate workflows.

Responsibilities include developing SOAR playbooks for triage and containment, building integrations with SIEM, EDR/XDR, IAM and cloud security, and delivering reusable automation components

Qualifications

• 3+ years of Automation/Security Operations experience.
• Strong programming in Python, PowerShell or JavaScript.
• Experience with automation/orchestration platforms such as Ansible, Itential, VMware Aria Orchestrator.
• Hands-on with REST APIs, JSON, webhooks, OAuth2, and mutual TLS.
• Working knowledge of SIEM concepts and SOC operations.
• Strong understanding of IAM, endpoint security, network security, vulnerability management, and cloud security fundamentals.
• Experience with Git workflows, code reviews, branching strategies, and software testing practices.
• Strong documentation and communication skills.

Responsibilities

• Design and deliver security automation to improve response times.
• Develop and maintain SOAR playbooks for alert triage, enrichment, containment, remediation, and response workflows.
• Build integrations with security tools including SIEM, EDR/XDR, IAM, vulnerability management, ticketing platforms, and cloud security solutions using APIs, webhooks, and event-driven architectures.
• Create reusable automation components such as scripts, libraries, and templates with proper logging, monitoring, error handling, and observability.
• Work with SOC and Incident Response teams to automate operational procedures and runbooks while implementing approval gates where required.
• Implement governance controls including RBAC, change management, audit logging, and documentation.
• Collaborate with infrastructure and engineering teams to automate security controls, compliance checks, policy-as-code, system hardening, and configuration drift remediation.
• Support incident response activities through automation for evidence collection, containment, and remediation while maintaining logging and chain-of-custody requirements.
• Ensure secure coding practices and implement safeguards to prevent misuse of automation workflows.
• Create and maintain documentation, operating procedures, runbooks, and knowledge transfer materials.

Skills

Python

PowerShell

JavaScript

REST APIs

webhooks

OAuth2

mutual TLS

SIEM concepts

SOC operations

IAM

Git workflows

documentation skills

Tools

Ansible

Itential

VMware Aria Orchestrator

Job description

The Automation / Orchestration / Security Engineer at Cognizant CIS designs, builds, and maintains security automation to improve response times and reduce manual work. You will collaborate with Security Operations, Incident Response, IT, and Cloud/Platform teams to integrate tools and automate workflows.

Responsibilities include developing SOAR playbooks for triage and containment, building integrations with SIEM, EDR/XDR, IAM and cloud security, and delivering reusable automation components