Job Summary
- Excellent understanding of ITIL & ITSM 2+ years of experience with Threat data protection and Vulnerability tools such as: CrowdStrike Symantec ATP/EDR/SDCS SEP 14 Qualys Symantec DLP(Endpoint and Network) CASB Encase 2+ years working on Verizon and Akamai CDN systems Experience and troubleshooting Web Proxies/DNS/Layer 7 security an asset Good understanding of certificates Experience with automation tools would be an asset Ability to multi-task and work under pressure Participate in DR
Responsibilities
- Design and implement secure infrastructure solutions using CrowdStrike technology to protect endpoints and servers across diverse enterprise environments while ensuring high availability and performance for business critical services.
- Configure and optimize CrowdStrike policies and detection rules to reduce false positives improve alert fidelity and enable timely response to genuine threats impacting corporate assets and data.
- Perform end to end vulnerability management activities by scanning assessing prioritizing and tracking remediation of security weaknesses on infrastructure components in alignment with risk appetite and compliance expectations.
- Coordinate with application owners and system administrators to validate vulnerability scan results plan remediation windows and verify successful closure of findings without disrupting essential business operations.
- Apply ITIL aligned processes for incident problem and change management to ensure that infrastructure security changes are controlled documented and executed with predictable outcomes and minimum service impact.
- Conduct detailed troubleshooting and root cause analysis for security and infrastructure issues using logs metrics and endpoint telemetry to restore services quickly and prevent recurrence.
- Develop and maintain automation scripts and reusable tools that streamline vulnerability scanning configuration compliance checks and environment health validation across multiple platforms.
- Create and execute structured testing procedures for new security controls CrowdStrike configurations and infrastructure changes to validate functionality performance and compatibility before production rollout.
- Collaborate closely with security operations teams to refine detection use cases enrich incident context and ensure that CrowdStrike alerts translate into actionable response steps and measurable risk reduction.
- Prepare clear technical documentation standard operating procedures and runbooks for routine security operations troubleshooting workflows and escalation paths to support consistent quality of service across teams.
- Provide guidance to peers and partner teams on secure infrastructure practices baseline hardening standards and effective use of CrowdStrike features to uplift the overall cyber resilience of the organization.
- Track and report key performance indicators and risk metrics related to endpoint protection vulnerability exposure and incident trends to support transparent governance and informed decision making.
- Engage in continuous improvement activities by reviewing post incident learnings assessing emerging threats and recommending enhancements to tools processes and infrastructure designs that benefit customers and society through stronger security.
Qualifications
- Demonstrate strong hands on experience with CrowdStrike implementation policy tuning endpoint onboarding and incident investigation in medium to large scale enterprise environments within the stated experience range.
- Show deep understanding of vulnerability management concepts including common vulnerability scoring prioritization methods and coordination of remediation with diverse technical stakeholders.
- Apply solid troubleshooting skills across operating systems networks and security tools to isolate complex issues and validate fixes through structured testing and verification activities.
- Exhibit practical knowledge of ITIL principles for incident problem and change processes and use that knowledge to maintain stable and predictable operation of infrastructure services.
- Communicate effectively with technical and non technical partners through concise documentation clear status updates and collaborative discussions focused on risk reduction outcomes.
- Display familiarity with hybrid work practices and remote collaboration tools to operate efficiently in distributed teams while maintaining high standards of security and delivery quality.
- Maintain a mindset of continuous learning across cyber security trends threat landscapes and automation techniques to keep infrastructure protections effective and aligned with organizational goals.
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
