Cybersecurity Exposure & Vulnerability Management Engineer

What makes Cognizant a unique place to work? The combination of rapid growth and an international and innovative environment! This is creating many opportunities for people like YOU — people with an entrepreneurial spirit who want to make a difference in this world. At Cognizant, together with your colleagues from all around the world, you will collaborate on creating solutions for the world's leading companies and help them become more flexible, more innovative, and successful. Moreover, this is your chance to be part of the success story.

Position Summary

We are seeking a detail-oriented Cybersecurity Exposure & Vulnerability Management Engineer to own the end-to-end lifecycle of exposure data across our security tooling ecosystem (ServiceNow Vulnerability Response, CrowdStrike, Rapid7, and zScaler). This role blends hands-on scripting and data analysis with platform administration, alert triage, and cross-functional stakeholder engagement to reduce organizational risk.

Mandatory Skills

• Hands-on scripting ability in Python and Bash for data extraction, parsing, and automation
• Working knowledge of REST APIs and experience integrating with security platforms
• Advanced proficiency in Excel or Google Sheets (pivot tables, lookups, index-match)
• Practical experience with ServiceNow (ideally the Vulnerability Response module) and CMDB concepts
• Familiarity with security platforms such as CrowdStrike, Rapid7, and zScaler
• Strong analytical skills with the ability to identify trends and anomalies across large, complex datasets
• Excellent written and verbal communication skills, with the ability to tailor technical content for different audiences

Roles And Responsibilities

• Utilize Python and Bash scripting to extract, parse, and ingest exposure and security data from ServiceNow VR, CrowdStrike, and Rapid7 APIs; populate and maintain internal reporting databases and exposure visualization dashboards
• Analyze high-volume datasets of vulnerabilities, exposure vectors, and system misconfigurations; cross-correlate exposure datasets against asset registers using web UIs, advanced Excel/Google Sheets, and automated scripts
• Oversee and optimize the ServiceNow Vulnerability Response module; ensure accurate mapping of ingested vulnerabilities to correct Configuration Items (CIs) in the EGL CMDB
• Build, maintain, and execute automated reporting scripts to keep security exposure dashboards updated; generate audience-appropriate reports for Product Managers, Delivery Leads, and Executive stakeholders
• Monitor and manage configuration, access rules, and overall health of Exposure Management Solutions (CrowdStrike, Rapid7, ServiceNow VR); enforce user access governance and maintain technical policy documentation
• Draft, submit, and manage operational change requests per EGL Change Management procedures for platform enhancements, patches, and version upgrades
• Collect daily, weekly, and monthly operational metrics from data protection consoles (e.g., CrowdStrike, zScaler); keep platform design, configuration, and architectural documentation current; build and refine basic platform monitoring alerts
• Execute routine operational tasks including configuration backups and integrity checks; triage and process inbound exemption and rule-override requests (e.g., DLP exceptions); implement authorized configuration updates; submit/track change requests through EGL Change Management workflow
• Document, create, and maintain step-by-step operational playbooks to standardize alert responses, triage workflows, and exception management
• Monitor and triage platform-level security and DLP alerts using tools such as CrowdStrike Device Control, zScaler Web DLP, and Endpoint DLP; investigate alerts and coordinate responses per approved playbooks
• Translate technical vulnerability and risk data into clear, actionable development and engineering tickets; coordinate with Development, Infrastructure, and Platform teams to drive remediation and patching
• Liaise regularly with internal cybersecurity teams, GRC, EUC support, Infrastructure leads, Product Managers, and Delivery Leads; address end-user queries relating to rule blocks, web filters, and inbound exemption requests

Qualifications/Certifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• Experience in vulnerability management, exposure management, or a broader cybersecurity operations role

Salary Range: >$100,000

Date of Posting: 9-Jul-26

Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us. For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers. Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.