Please find the :

- Experience: 4 to 8 years

- Shift- Rotational

- Location- Bangalore, Chennai, Pune, Hyderabad

- Technical Skills:

1. Azure Logic Apps

1.workflow design, reusable templates, connectors, error handling, retries

2.Event‑driven automation (alert, incident, entity‑based triggers)

3.SOAR use cases: enrichment, containment, remediation, notification

1. Scripting & Programming (PowerShell/python any one preferred atleast)

- PowerShell (Azure, Microsoft 365, Security automation)

- Python (API integrations, data parsing, enrichment logic)

- JSON (Logic App definitions, API payloads)

Key Responsibilities

- Design, develop, and maintain automation workflows using Azure Logic Apps, including reusable workflow templates and modules.

- Build and manage SOC automation playbooks in Microsoft Sentinel, triggered via automation rules for alert/incident/entity-driven response.

- Automate incident response activities such as enrichment, containment, and notifications, improving SOC efficiency and consistency.

- Develop and maintain automation scripts using PowerShell or Python to support SOC workflows and response actions.





- Integrate workflows with Microsoft security platforms including Microsoft Sentinel, Defender, and Entra ID.

- Build API-based integrations using REST APIs and Microsoft Graph API for identity/session response and enrichment.

- Implement automated response actions such as account disablement, session revocation, IP blocking, and endpoint isolation (with appropriate guardrails/approvals).

- Integrate Sentinel automation with ITSM tools (e.g., ServiceNow) for incident/ticket creation and updates.

- Use Azure Key Vault for secure secrets/credential handling and ensure least-privilege access patterns.

- Monitor Logic App executions, troubleshoot workflow failures, and improve reliability, performance, and execution cost. (Internal KT notes also emphasize retention/cost awareness and continuous optimization.)

- Maintain logging, auditing, and compliance visibility for all automated actions and integrations.

- Collaborate with SOC analysts and platform teams to identify and deliver automation opportunities; produce technical documentation, runbooks, and workflow diagrams.

📌 Automation Engineer Cyber Security (India)
🏢 Cognizant
📍 India