Cyber Security Analyst

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant's Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Role and Responsibilities:

* Responsible for monitoring Security events from SIEM, Threat Intelligence, end user notifications, etc to determine security risk and respond accordingly.

* Follow established processes, procedures & SLAs to respond and to document analysis of security events.

* Participate in a weekly rotation to handle various tasks within the SOC (SIEM, Mailbox monitoring, Threat Intel, etc)

* Responsible for development/improvement of processes/procedures related to Cyber Security Operation Center.

* Review existing alerts, identify opportunities for tuning and work with Content development team to test and implement them.

* Participate in review of new SIEM use cases and develop runbooks that provide guidelines for analyzing specific threats related to the new use cases.

Preferred experience:

* Security+, CSA+, CEH certifications

* Threat Hunting experience

* Experience in the financial services industry

Qualifications:

* Bachelor's degree in Information Security, Computer Science, Information Technology, related field or equivalent work experience

* 5+ years of Information Security or related risk management experience

* 2+ years of Hands-on Information Security SOC/Incident Response experience with analyzing IOCs/Alerts as identified by CSOC & Threat Intel team

* Demonstrated experience with SIEM use cases and runbook development

* Demonstrated experience in handling security events in mission critical environments

* Good knowledge of enterprise detection technologies and processes (Advanced Threat Detection Tools, IDS/IPS, Network Packet Analysis, Endpoint Protection)

* Knowledge of network protocols and operating systems (Windows, Unix, Linux, Databases)

* Relevant security knowledge and experience in two of the following areas: security operations, incident response, network/host intrusion detection, threat response

* Ability to communicate clearly, effectively, persuasively, and credibly with internal management and external senior level oversight entities.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 18 April 2025.

Salary and Other Compensation:

The annual salary for this position is between $[72,000 - 87,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

* Medical/Dental/Vision/Life Insurance

* Paid holidays plus Paid Time Off

* 401(k) plan and contributions

* Long-term/Short-term Disability

* Paid Parental Leave

* Employee Stock Purchase Plan