Cyber Security Specialist

Job Summary

This hybrid role seeks a cyber security specialist with seven to nine years of experience to design operate and enhance enterprise monitoring and response capabilities using Logrhythm SIEM AlertLogic SIEM Arcsight IBM Qradar and PowerShell scripting. The role focuses on proactive threat detection rapid incident handling and improved security posture across a complex multinational environment.

Responsibilities

• Monitor security events across Logrhythm SIEM AlertLogic SIEM Arcsight and IBM Qradar platforms to identify patterns that indicate potential threats and emerging attack campaigns
• Investigate security alerts in a structured manner by correlating events from multiple SIEM sources and documenting clear findings for rapid stakeholder understanding
• Develop PowerShell scripts to automate repetitive monitoring enrichment and reporting tasks that increase detection efficiency and reduce analyst workload
• Configure advanced correlation rules and tuning changes in Logrhythm SIEM to minimize false positives while preserving strong detection coverage for critical use cases
• Configure and optimize AlertLogic SIEM content to strengthen visibility into cloud workloads and network traffic and align detections with organizational risk priorities
• Enhance Arcsight use cases by refining filters thresholds and content updates that support consistent detection of suspicious or policy violating behavior
• Maintain and improve IBM Qradar parsers reference sets and custom rules to support high fidelity alerts and reliable incident prioritization across hybrid infrastructure
• Coordinate incident handling activities with internal technology and business teams by providing clear technical explanations containment guidance and remediation recommendations
• Document incident timelines root cause analysis and lessons learned in a clear and repeatable format that supports audit readiness and future control improvements
• Collaborate with infrastructure and application teams to validate log sources ensure complete onboarding into all SIEM platforms and close gaps in visibility across critical assets
• Support creation and refinement of security runbooks that define step by step responses for frequent incident types and help ensure consistent handling and reduced response times
• Contribute to regular threat hunting activities across SIEM data by forming testable hypotheses and exploring anomalies that reveal stealthy or low volume attacks
• Produce concise security metrics and trend reports that demonstrate risk reduction progress and inform decision makers about areas requiring additional controls or investments
• Mentor less experienced analysts by sharing SIEM tuning techniques scripting approaches and investigation strategies that uplift the overall capability of the cyber defense function
• Participate in continuous improvement initiatives focused on log quality detection coverage and workflow automation that align with the organization mission and customer trust goals

Qualifications

• Possess professional experience in cyber security monitoring and incident response with seven to nine years spent in roles focused on SIEM operations and threat analysis
• Demonstrate strong hands on proficiency with Logrhythm SIEM including rule configuration tuning activities dashboard creation and development of targeted detection scenarios
• Demonstrate practical expertise with AlertLogic SIEM for monitoring cloud and network environments and integrating alerts into standardized incident response workflows
• Exhibit substantial experience with Arcsight platform administration content management and log onboarding for complex enterprise environments in regulated industries
• Display practical IBM Qradar skills that include parser management creation of custom detection logic and optimization of offenses to reduce noise and highlight material risks
• Apply solid PowerShell scripting capabilities to build automation for data collection enrichment and reporting tasks that improve consistency and reduce manual effort
• Bring working knowledge of operating systems networks and common enterprise applications sufficient to interpret logs and understand the context of unusual activities
• Communicate technical findings and remediation guidance in clear language that can be understood by both technical and non technical stakeholders in a multinational organization
• Adapt effectively to a hybrid work model by using collaboration tools and structured communication practices that maintain strong teamwork without frequent travel
• Prefer exposure to industry frameworks such as NIST or ISO in order to align detection and response processes with recognized control requirements and best practices

Sobre a Cognizant
Cognizant (NASDAQ: CTSH) é uma construtora de IA e fornecedora de serviços de tecnologia, criando a ponte entre o investimento em IA e o valor para as empresas por meio do desenvolvimento de soluções de IA completas para nossos clientes. Nossa profunda experiência em setores, processos e engenharia nos permite incorporar o contexto único de cada organização em sistemas tecnológicos que potencializam a capacidade humana, geram resultados tangíveis e mantêm empresas globais à frente em um mundo em rápida transformação. Saiba mais em cognizant.ai ou @cognizant.

A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.

Informações adicionais de emprego 
Os candidatos podem ser obrigados a comparecer a entrevistas presenciais ou por videoconferência. Além disso, os candidatos podem ser obrigados a apresentar seu documento de identificação emitido pelo estado ou governo atual durante cada entrevista. 

Embora nosso sistema permita a candidatura em todos os idiomas, o(s) idioma(s) e o(s) nível(is) de proficiência exigidos para o trabalho variam. No entanto, é necessário um nível básico de inglês para fins de comunicação em toda a empresa. 

A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.

Se você tem uma deficiência que requer adaptações razoáveis para procurar uma vaga de emprego ou enviar uma candidatura, envie um e-mail para [email protected] com sua solicitação e informações de contato.