SOAR Security Automation Engineer

Cognizant; Saint Paul (MN); On-site; USD 115,000 - 134,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant’s CIS Practice in the United States is seeking an Automation / Orchestration / Security Engineer to design, build, and maintain security automation and orchestration solutions that improve response times and reduce manual effort.

The role collaborates with Security Operations, Incident Response, IT, and Cloud/Platform teams to integrate tools, automate workflows, implement governance controls, and develop reusable components with strong logging, observability, and secure coding

Qualifications

• 3+ years of automation/security operations experience.
• Strong programming with Python, PowerShell, or JavaScript.
• Experience with automation/orchestration platforms (Ansible, Itential, VMware Aria).
• Hands-on with REST APIs, JSON, webhooks, OAuth2, mutual TLS.
• Familiar with SIEM, IAM, cloud security fundamentals.

Responsibilities

• Design and deliver security automation and orchestration capabilities to improve response times and operational efficiency.
• Develop and maintain SOAR playbooks for alert triage, enrichment, containment, remediation, and response workflows.
• Build integrations with security tools including SIEM, EDR/XDR, IAM, vulnerability management, ticketing platforms, and cloud security solutions using APIs, webhooks, and event-driven architectures.
• Create reusable automation components such as scripts, libraries, and templates with proper logging, monitoring, error handling, and observability.
• Work with SOC and Incident Response teams to automate operational procedures and runbooks while implementing approval gates where required.
• Implement governance controls including RBAC, change management, audit logging, and documentation.
• Collaborate with infrastructure and engineering teams to automate security controls, compliance checks, policy-as-code, system hardening, and configuration drift remediation.
• Support incident response activities through automation for evidence collection, containment, and remediation while maintaining logging and chain-of-custody requirements.
• Ensure secure coding practices and implement safeguards to prevent misuse of automation workflows.
• Create and maintain documentation, operating procedures, runbooks, and knowledge transfer materials.

Skills

Python

PowerShell

JavaScript

REST APIs

SIEM

IAM

Tools

Ansible

Itential

VMware Aria Orchestrator

Job description

Cognizant’s CIS Practice in the United States is seeking an Automation / Orchestration / Security Engineer to design, build, and maintain security automation and orchestration solutions that improve response times and reduce manual effort.

The role collaborates with Security Operations, Incident Response, IT, and Cloud/Platform teams to integrate tools, automate workflows, implement governance controls, and develop reusable components with strong logging, observability, and secure coding