Security Analyst

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose – always guided by our core values. Join us in shaping future of business. Could you be the one to make a difference?

On the Corporate Security team at Cognizant, we challenge ourselves every day to continuously meet the highest standards of security. Our purpose is to deliver world class security and risk management capabilities to protect and enable Cognizant’s trusted global business while creating client value and competitive differentiation. From oversight and coordination of security efforts to compliance and risk management, the Corporate Security team’s responsibilities span across multiple partners and clients in the marketplace to defend against today’s threats.

Come join us and help build more secure and resilient infrastructure for the future!

This role falls under the Health Care Security Operations Center, helping to secure integrated businesses, working with the Corporate Security team to verify and validate logs sources and respond to threats. The Security Analyst will monitor logs in a Security Information and Event Management (SIEM) platform and conduct Detection and Response activities that align with the Corporate Enterprise Security Monitoring plan.

This is a Tier 1 position within a team that focuses on 24/7 monitoring and reporting of security events and incidents leveraging a SIEM tool and several other security tools within a security suite. Successful candidates must be inquisitive, detail-oriented, and have strong problem‑solving skills to quickly address anomalies. Ideally, the candidates for this role thrive in diverse and fast‑paced environments.

• Monitors various log sources from tools and applications such as Endpoint Detection and Response (EDR) logs, Intrusion Prevention/Detection Systems (IPS/IDS), firewall logs, Windows logs, Linux operating system logs, etc.
• Analyze true positive incidents and provide detailed analysis comments for respective support / business functions to take corrective / remedial / compensatory actions
• Escalate high or critical incidents or complex security alerts to Senior Security Analysts.
• Monitor Data Loss Prevention alerts and respond to associated events as appropriate.
• Track and update security incidents over the course of the incident lifecycle.
• Participate in reviewing, validating, and continuously evaluating the efficacy of logs for quality and relevance
  • Documentation of log event types
  • Updating new log event types
  • Mapping existing and new use cases to log source types
  • Recommending new use cases, as appropriate
• Prepare documents and reports as requested.
• Attend meetings and training as required.
• Participate in knowledge sharing sessions.
• Recommend documentation improvements.
• This is a 2nd shift position (12pm-8pm EST)

• 1 or more years of Security Operations Center experience
• Some IT exposure (certification, self‑learning, or job experience)
• Industry standard security certification (i.e., Security+, CeH, CCNA, or other entry‑level security certifications)
  • Additional certifications will be reviewed by management.
• Communication skills (i.e., provide reports to management, elevate issues, etc.)

• Bachelor’s degree in computer science, information security, or a related field
• Experience in SIEM software and EDR tools.
• Well versed in log analysis on various log sources from Next‑Gen firewalls, Domain Controllers, Linux operations systems, Anti‑Virus logs, EDR/XDR, IPS/IDS, router and switch logs, etc.
• Strong verbal/written communication and interpersonal skills are required to document and communicate findings, elevate critical incidents, and interact with other members.
• Experience in Threat hunting, log integration, and incident case management.
• Preferred…