Job Description

Responsibilities

• Design and implement automated containment workflows across SIEM, SOAR, endpoint, identity, network, and cloud security platforms.
• Develop incident response playbooks for endpoint isolation, account restriction, malicious IP blocking, credential containment, and cloud workload quarantine.
• Define automation eligibility, approvals, rollback procedures, exception handling, and human-in-the-loop controls.
• Architect an agentic SOC roadmap with security agents, orchestration workflows, and MCP integrations.
• Build secure integrations among security platforms, AWS services, case-management systems, and enterprise APIs using Python.
• Develop cloud-native security automation using AWS, EKS, Terraform, and related platform services.
• Validate response workflows through testing, Purple Team exercises, and incident response simulations.
• Create metrics, dashboards, architecture documentation, runbooks, support procedures, and knowledge-transfer materials for operational transition.

Requirements

• 8+ years of experience in cybersecurity engineering, security operations, cloud security, incident response, or security automation.
• Strong hands-on expertise with AWS security services, cloud-native architecture, and enterprise security operations.
• Experience designing automated incident response and containment workflows across SIEM, SOAR, EDR, IAM, network, and cloud platforms.
• Strong programming and automation skills using Python, APIs, and event-driven integration patterns.
• Hands-on Terraform and Infrastructure as Code experience for secure, repeatable cloud deployments.
• Experience with AWS EKS, containerized workloads, Kubernetes security, and cloud workload containment.
• Understanding of agentic SOC architectures, AI-enabled security workflows, MCP integrations, and human-in-the-loop controls.
• Experience with Git-based development and CI/CD tools such as Bitbucket or equivalent platforms.
• Knowledge of incident response, Purple Team testing, approval controls, rollback mechanisms, and exception management.
• Strong architecture, troubleshooting, documentation, stakeholder communication, and operational transition skills.

Benefits

• Medical, dental, vision, and life insurance.
• Paid holidays and paid time off.
• 401(k) plan and contributions.
• Long-term and short-term disability coverage.
• Paid parental leave.
• Employee Stock Purchase Plan.
• Eligible for Cognizant’s discretionary annual incentive program based on performance and applicable plan terms.

Job Tags

Similar Jobs