Key Responsibilities
Security Platform Operations & Administration
- Manage and maintain enterprise cybersecurity platforms, including:
- Next-Generation Firewalls (NGFW)
- Endpoint Detection & Response (EDR)
- Privileged Access Management (PAM)
- DDoS Protection and Web Application Security Platforms
- Perform preventive maintenance, health checks, platform upgrades, patching, and configuration reviews to ensure optimal performance and security.
- Monitor platform health, security events, logs, alerts, and operational status to identify and resolve issues proactively.
- Coordinate with vendors and internal teams for troubleshooting, platform support, escalations, and technical enhancements.
Firewall & Network Security Management
- Administer enterprise firewall environments, including:
- Security policy management
- Access control reviews
- Firewall rule optimization
- Configuration backup and recovery
- Firmware and software patching
- Conduct periodic reviews of firewall configurations and access controls to maintain compliance with security policies.
- Support security assessments, audits, and infrastructure security reviews.
- Assist in change implementation, network troubleshooting, and incident investigation activities.
Endpoint Security Administration
- Administer and maintain Endpoint Detection & Response (EDR) platforms.
- Monitor endpoint security health, sensor coverage, platform performance, and log collection.
- Troubleshoot endpoint-related security issues and support onboarding of new assets.
- Coordinate with vendors for platform upgrades, advanced troubleshooting, and system enhancements.
DDoS Protection & Web Security
- Support enterprise DDoS protection and web application security platforms.
- Manage onboarding and offboarding of internet-facing applications and websites.
- Review access controls, platform reports, security alerts, and administrative activities.
- Support:
- IP whitelisting and blacklisting
- SSL certificate management
- WAF policy administration
- Security configuration reviews
- Work with security and operations teams to continuously improve platform effectiveness against evolving threats.
Privileged Access Management (PAM)
- Administer privileged access management solutions and privileged accounts.
- Manage privileged account onboarding, offboarding, password management, and access reviews.
- Support privileged session monitoring, audit reviews, and access governance activities.
- Ensure privileged access processes comply with organizational security standards and controls.
Security Compliance & Governance
- Ensure cybersecurity platforms comply with internal security policies, regulatory requirements, and industry best practices.
- Participate in audits, security assessments, and compliance reviews.
- Support change management processes, including:
- Change reviews
- Risk assessments
- Implementation planning
- Operational readiness validation
- Maintain security documentation, SOPs, architecture diagrams, asset inventories, and operational procedures.
Incident Response & Security Operations
- Support cybersecurity incident investigation and response activities.
- Perform log analysis and forensic data collection for security investigations.
- Assist in identifying root causes, implementing remedial actions, and preventing recurrence of incidents.
- Prepare incident reports and support post-incident reviews.
Backup, Recovery & Operational Resilience
- Maintain platform backup and recovery procedures.
- Verify backup integrity and support periodic restoration testing.
- Ensure backup and recovery practices align with operational and security requirements.
- Support business continuity and disaster recovery readiness activities.
Mandatory Requirements
- Minimum 5 years of experience in Cybersecurity Engineering, Security Operations, Infrastructure Security, or Cyber Platform Administration.
- Minimum 2 years of experience supporting Singapore Government, Statutory Boards, Public Sector agencies, or highly regulated environments.
- Experience managing enterprise security platforms in production environments.
- Strong understanding of:
- Cybersecurity operations
- Security monitoring
- Security governance
- Platform lifecycle management
- Change management processes
- Experience working with vendors, support providers, and internal stakeholders.
- Strong analytical, troubleshooting, and incident management capabilities.
- Excellent communication and stakeholder management skills.
Technical Requirements
Required Skills
- Enterprise Networking:
- TCP/IP
- VLANs
- Routing
- NAT
- DNS
- Network Segmentation
- Traffic Flow Analysis
- Firewall Administration:
- Palo Alto Networks or equivalent Next-Generation Firewall solutions
- Endpoint Security:
- Carbon Black, CrowdStrike, Microsoft Defender, SentinelOne, or equivalent EDR platforms
- Privileged Access Management:
- CyberArk or equivalent PAM solutions
- DDoS Protection and WAF Platforms:
- Cloudflare, Akamai, F5, Imperva, or similar technologies
- Security Operations:
- Log analysis
- Security monitoring
- Incident response
- Vulnerability management
- Security hardening
- Operating Systems:
- Linux (Red Hat preferred)
- Windows Server
Preferred Skills
- Experience supporting Critical Information Infrastructure (CII) or highly secure environments.
- Knowledge of:
- Air-gapped environments
- Secure file transfer processes
- Network isolation controls
- PKI and certificate lifecycle management
- Familiarity with:
- Cybersecurity audits
- Security compliance frameworks
- Patch management processes
- Change management methodologies
À savoir avant de postuler
- Autorisation de travail: Cognizant ne prendra en considération que les candidats à ce poste qui sont légalement autorisés à travailler au Canada sans avoir besoin d'un parrainage de l'employeur, aujourd'hui ou à l'avenir.
- Mesures d’adaptation: Si vous avez un handicap qui nécessite des mesures d’adaptation raisonnable pour effectuer une recherche d’emploi ou poser une candidature, veuillez envoyer un courriel à [email protected] avec votre demande et vos coordonnées.
- L’IA dans notre processus de recrutement: Nous utilisons des outils d'intelligence artificielle (IA) pour trier et évaluer les candidatures efficacement. Notre équipe examine ensuite les candidatures et décide qui passe à l’étape suivante.
- Poste à pourvoir: Sauf indication contraire, ce poste est actuellement vacant et nous cherchons à le pourvoir.
- Exigences linguistiques: Nous demandons à tous les candidats de posséder une connaissance de base de l’anglais afin de faciliter les communications internes. Pour les postes au Québec, la capacité à communiquer efficacement en anglais est requise car vous fournirez des services à et collaborerez avec des parties prenantes anglophones situées hors de la province.
- Inclusion: Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, des renseignements génétiques, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée par les lois fédérales, provinciales ou locales.
À propos de Cognizant
Cognizant (NASDAQ: CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif: améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus: cognizant.ai ou @cognizant.
