About Cognizant Corporate
Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.
At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose – always guided by our core values. Join us in shaping future of business.
As a Security Specialist, you will be responsible for monitoring, triaging, analysing, and responding to cybersecurity alerts and incidents within a 24x7 Security Operations Centre environment. You will work closely with SOC leadership, security engineers, infrastructure teams, and business stakeholders to strengthen the organisation's cyber defence capabilities and ensure timely response to security threats.
This role provides the opportunity to develop deep technical expertise in threat detection, incident response, security monitoring, use case optimisation, and cybersecurity reporting while contributing to continuous improvement initiatives that enhance the overall security posture of the organisation.
· Triage security alerts generated by SIEM platforms within defined SLAs and determine validity, criticality, and ownership.
· Investigate confirmed security incidents and provide detailed analysis, recommendations, and remediation guidance to relevant stakeholders.
· Follow established SOPs and playbooks for alert triage, investigation, and incident management activities.
· Handle SOC-related requests and support activities in a timely and professional manner.
· Own and manage one or more log source types, ensuring log quality, relevance, and coverage for security monitoring.
· Document log event types and maintain log source documentation.
· Map security use cases to available log sources and recommend new detection opportunities.
· Generate scheduled security reports, provide investigation summaries, and communicate findings to stakeholders.
· Support SOC leadership in creating and maintaining SOPs, playbooks, and operational processes.
· Recommend improvements to existing detection use cases, workflows, and response procedures based on emerging threats and lessons learned.
· Produce detailed investigation reports and provide actionable recommendations to improve security posture.
· Support automation initiatives, strategic cybersecurity projects, and continuous improvement efforts.
· Stay updated on emerging threats, security technologies, and industry best practices.
· Embrace our vibrant culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Take ownership, build relationships, and focus on personal growth to drive business strategy and foster an inclusive culture.
What you must have to be considered
· Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline.
· Minimum 3+ years of experience in a Security Operations Centre (SOC) environment.
· Strong understanding of Networking, TCP/IP, OSI Model, Windows and Linux Operating Systems.
· Knowledge of Web Applications, Databases, and common cyber attack techniques.
· Experience with SIEM platforms and security monitoring processes.
· Strong analytical and incident investigation skills.
· Ability to communicate technical risks and findings effectively to both technical and non-technical stakeholders.
· Experience working with SOPs, security procedures, and incident management processes.
· A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good.
· The embodiment of Cognizant's Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, and Own It.
These will help you succeed
· Cybersecurity certifications such as CompTIA Security+, CEH, SC-200, CySA+, GCIH, Splunk Certified User, or equivalent.
· Experience with Microsoft Sentinel, Splunk, QRadar, or similar SIEM technologies.
· Experience with threat hunting, EDR/XDR, and security automation.
· Knowledge of MITRE ATT&CK framework and modern threat actor techniques.
· Experience creating SOPs, playbooks, and security reports.
· Strong presentation and stakeholder management skills.
· Ability to mentor team members and support knowledge-sharing initiatives.
· Continuous learning mindset with a passion for cybersecurity research and innovation.
Work model –
Hybrid - Chennai
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position based in Chennai and will support 24x7 SOC operations through rotational shifts. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programmes.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
