Senior IT Security Officer
Job Summary
Cybersecurity Operational Work
· Perform routine reporting and dashboarding activities, leveraging automation to improve efficiency
· Support the review of VAPT findings and contribute to remediation planning
· Validate security vulnerabilities and findings from various assessment reports
· Refine incident response playbooks
· Contribute to compliance-related documentation and evidence collection
· Assist in implementing security controls and operational security tasks
· Participate in threat modelling exercises and identify security requirements from policies
· Perform periodic IAM role reviews to ensure least privilege access principles
Security Architecture & Engineering
· Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments
Cyber Defence & Incident Response
· Support incident response activities and escalate complex issues appropriately
· Perform alert triage and assist in investigations across security monitoring platforms
· Contribute to refining detection rules, playbooks, and response runbooks
· Support guided threat hunting activities to identify potential indicators of compromise
Product Engineering
· Deliver POCs or features spanning multiple components while balancing security, performance, and maintainability
· Utilise code and cloud security analysis tools and remediate findings appropriately
· Recommend improvements to enhance product security, performance, and team efficiency
Emerging Technology Research
· Conduct testing of new tools in lab environments and summarise findings
· Contribute to POC initiatives with defined objectives and outcomes
Collaboration & Growth
· Collaborate with peers and stakeholders to ensure tasks are executed effectively
· Share knowledge, resources, and lessons learnt openly to support team success
· Suggest improvements that enhance team effectiveness
- What We Are Looking For
Technical Skills
· Foundational knowledge in security architecture, secure system design, and threat modelling
· Ability to perform guided vulnerability validation and support remediation
· Familiarity with securing CI/CD platforms, Kubernetes environments, and cross-cutting platform products
· Exposure to developer-centric tools including agentic AI workflows and coding assistants
· Familiarity with SIEM platforms, EDR tools, and cloud-native security monitoring
· Ability to follow and contribute to detection logic, incident response playbooks, and threat hunting processes
· Scripting or automation skills (e.g. Python, Bash) for security tooling and workflow automation
· Understanding of identity and access management, secrets management, and zero trust principles
Behavioural Expectations
· Able to work independently with minimal supervision and guidance
· Proactively identifies and addresses issues, knowing when to escalate
· Adapts to changing priorities effectively
· Collaborates constructively with peers and stakeholder
· Contributes positively through knowledge sharing and openness
Education & Experience
· Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering, or Information Technology
· Relevant experience or demonstrated potential backed by a strong track record is desirable
- Certifications (Desirable)
OSCP, CISSP, or other relevant cybersecurity certifications
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
