SOC Analyst 1, Blue Ash, Ohio, United States

About Cognizant

Cognizant is one of the world’s leading professional services companies, helping organizations modernize technology, strengthen security posture, and protect critical information assets. Cognizant supports secure, resilient, and compliant operations across complex and regulated environments.

Role Summary

The SOC Analyst I is responsible for supporting day‑to‑day security operations by monitoring, analyzing, and responding to security events and incidents. This role works closely with other security team members to improve threat visibility, detect and prevent malicious activity, and protect organizational data, systems, and intellectual property.

Key Responsibilities

Investigate and analyze escalated security incidents, including malware, phishing, insider threats, and advanced threats.
Support and participate in incident response activities across all phases of the incident lifecycle.
Utilize SIEM, UEBA, and related security tools to analyze logs, correlate events, and identify suspicious activity.
Conduct proactive threat hunting by identifying indicators of compromise and abnormal behavior patterns.
Collaborate with security engineering teams to tune and optimize detection tools to improve effectiveness and reduce false positives.
Perform forensic analysis to determine scope, impact, and root cause of security incidents.
Partner with governance, risk, and compliance teams to prioritize and track remediation of identified vulnerabilities.
Develop clear and detailed incident reports with analysis and recommendations.
Contribute to incident response playbooks, processes, and security documentation.
Collaborate with and support other SOC analysts through knowledge sharing and operational coordination.
Identify opportunities to improve security monitoring, response processes, and overall security posture.

Required Qualifications

2–6 years of experience in security operations, incident response, SOC analysis, or related cybersecurity roles.
Hands‑on experience with SIEM and security analytics platforms.
Ability to analyze complex security events and correlate multiple data sources.
Working knowledge of threat detection, incident response, and security monitoring practices.
Strong analytical, investigative, and documentation skills.

Preferred Qualifications

Experience with security platforms such as Securonix, DLP solutions, EDR, and SOAR technologies.
Scripting or automation experience (e.g., Python).
Industry certifications such as Security+, GSEC, CySA+, or equivalent.
Experience contributing to continuous improvement within a security operations environment.

Work Model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in our office in Blue Ash, Ohio. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.

Legal & Work Authorization

Candidates must be legally authorized to work in the United States. Employment eligibility verification will be required at the time of hire.

About us
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, building the bridge between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, realize tangible returns and keep global enterprises ahead in a fast-changing world. See how at www.cognizant.com or @cognizant.

Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.