Security Orchestration & Automation

Security Orchestration & Automation Engineer Jobs

2 jobs found

Today

Lead Cloud Security Engineer

Cognizant New York, NY

New York, NY

Today

$115k - $134k/yr Full time Agentic Soc Analytics Application Security

Apply Now

Job Description

Lead Cloud Security Engineer role in New York, NY (onsite) focused on automated containment and agentic SOC capabilities across enterprise security environments.

Responsibilities

Design and implement automated containment workflows across SIEM, SOAR, endpoint, identity, network, and cloud security platforms
Create incident response playbooks for endpoint isolation, account restriction, malicious IP blocking, credential containment, and cloud workload quarantine
Define automation eligibility criteria, approval requirements, rollback procedures, exception handling, and human-in-the-loop controls
Architect and implement an agentic SOC roadmap, including custom security agent patterns, orchestration workflows, and MCP integrations
Build integrations between security platforms, AWS services, case-management systems, and enterprise APIs using Python and secure API patterns
Validate automated response and containment via testing, Purple Team exercises, and incident response simulations
Develop cloud-native security automation using AWS, EKS, Terraform, and related platform services
Collaborate with Cyber Defense, SOC, Incident Response, Cloud Security, IAM, and infrastructure teams to operationalize response capabilities
Create operational metrics and dashboards to track automation coverage, response times, containment success, exceptions, and operational effectiveness
Produce architecture documentation, containment playbooks, runbooks, support procedures, and knowledge-transfer materials for transition into BAU operations

Requirements

8+ years of experience in Cybersecurity Engineering, Security Operations, Cloud Security, Incident Response, or Security Automation
Strong hands-on expertise in AWS security services, cloud-native architecture, and security operations in enterprise environments
Experience designing automated incident response and containment workflows across SIEM, SOAR, EDR, IAM, network, and cloud platforms
Strong programming and automation skills using Python, APIs, and event-driven integration patterns
Hands-on experience with Terraform and Infrastructure as Code for secure, repeatable deployments
Experience with AWS EKS, containerized workloads, Kubernetes security, and cloud workload containment strategies
Understanding of agentic SOC architectures, AI-enabled security workflows, MCP integrations, and human-in-the-loop automation controls
Experience using Git-based development and CI/CD tools such as Bitbucket or equivalent platforms
Strong knowledge of incident response, Purple Team testing, approval controls, rollback mechanisms, and exception-management processes
Strong architecture, troubleshooting, documentation, stakeholder communication, and operational transition skills

Technologies

SIEM, SOAR, EDR, IAM
AWS, AWS EKS, Kubernetes, containerized workloads
Python, APIs, event-driven integration patterns
Terraform, Infrastructure as Code
agentic SOC architectures, AI-enabled security workflows, MCP integrations
human-in-the-loop automation controls
Git-based development, CI/CD, Bitbucket

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

Practice (CIS - Cloud, Infrastructure, and Security Services)

Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS) supports digital transformation through holistic modernization across layers
Helps customers transform infrastructure and workplace to meet evolving needs of the digital era
Holistic approach emphasizes cloud-driven modernization and workplace and operational transformation to run the business in a secure environment

Compensation

Annual salary: USD 114,500 - 134,000 (based on experience and other qualifications)
Eligible for Cognizant’s discretionary annual incentive program based on performance, subject to plan terms

View full job page →

1d ago

Senior Network Security Engineer

Baylor College of Medicine Houston, TX

Houston, TX

1d ago

$111k - $131k/yr Full time Senior Cybersecurity Tools Incident Response

Apply Now

Job Description

Join Baylor College of Medicine in Houston as a senior engineer responsible for designing, implementing, and operating enterprise network security capabilities.

Responsibilities

Design, implement, configure, and maintain Baylor enterprise network security infrastructure, including firewalls, application load balancers, VPN, SD-WAN security, intrusion prevention, and related security platforms.
Create secure solutions that are highly available, scalable, and aligned with best practices and organizational requirements.
Lead root cause investigation, troubleshooting, resolution, and documentation for complex network security and infrastructure incidents.
Act as a senior escalation point, identifying root causes and corrective actions to prevent recurrence.
Identify, assess, and prioritize security risks tied to network infrastructure and services.
Participate in security reviews, assessments, and technology evaluations to strengthen Baylor’s security posture.
Collaborate with OIT Security and Compliance to develop and maintain security policies, procedures, standards, and guidelines.
Ensure security infrastructure alignment with organizational, regulatory, and industry requirements.
Provide senior-level technical guidance and consulting across security architecture, infrastructure design, and implementation.
Mentor junior technical staff and promote secure, reliable, scalable, and supportable solutions.
Serve as a senior technical resource for security projects, including technology evaluation, design, implementation, migration, and lifecycle management.
Coordinate technical activities to support successful implementation delivery.
Improve security operations using automation, monitoring, and process improvements.
Leverage scripting and orchestration to improve efficiency, consistency, and scalability.
Own one or more security services and continuously improve security, reliability, performance, and operational efficiency.
Use automation, AI, ServiceNow, and emerging technologies to strengthen security posture, improve operational efficiency, reduce manual effort, and enhance security visibility and response.
Perform other job-related duties as assigned.

Requirements

Bachelor’s degree. Four years of relevant experience may substitute for the degree requirement.
Four years of relevant experience.

Technical Skills and Tools

Firewalls, application load balancers, VPN, SD-WAN security, intrusion prevention
Scripting, orchestration, automation, AI, ServiceNow
SolarWinds
Micro segmentation, Network Access Control, URL filtering, IDS/IPS
Packet capture, protocol analysis
Spreadsheets
TCP/IP, subnetting, routing, switching

Additional Role Details

Time allocation: 60-70% project work and 30-40% operational daily work.
On-call: participates in an on-call rotation roughly every 10 weeks.
Smartphone coverage: carries a Smartphone for 24 x 7 x 365 response to business-related matters and is financially responsible for it.
Titles: internal title Senior IT Security Associate; working title Senior Network Security Engineer.

Preferred Qualifications and Skills

5 years of general IT experience.
7-10 years of data security and/or data networking experience.
Advanced ability to implement, configure, troubleshoot, and secure enterprise security technologies, including firewalls, VPNs, micro segmentation, Network Access Control, Application Load Balancers, URL filtering, and IDS/IPS.
Strong understanding of enterprise networking concepts including TCP/IP, subnetting, routing, switching, and network segmentation.
Advanced ability to analyze network traffic using packet capture and protocol analysis to troubleshoot complex security and connectivity issues.
Strong understanding of secure network architecture, high availability, and integration of security controls across LAN, WAN, data center, and cloud environments.
Excellent written, verbal, interpersonal, and technical communication skills, including cross-team collaboration and senior-level guidance.
Proficiency in spreadsheets and other analysis tools.
Ability to use SolarWinds and other monitoring/management tools to analyze performance, identify trends, create alerts, support operational decisions, and drive continuous improvement.
Demonstrated ability to lead infrastructure and security projects of varying sizes, manage priorities, coordinate cross-functional teams, and adapt to changing requirements.

Work Authorization

Not eligible for visa sponsorship.
Candidates must be legally authorized to work in the United States at the time of application and throughout employment.

Location: Houston, TX (onsite)
Salary: USD 111,118 - 130,728 per year

View full job page →

Security Orchestration & Automation Engineer Jobs

Lead Cloud Security Engineer

Senior Network Security Engineer

Get Security Orchestration & Automation Engineer Jobs alerts