Job Description

Cognizant is searching for a talented information security professional with subject matter expertise & tactical experience in the operational aspects of cyber security monitoring, incident response and technical controls focused on service delivery.

The Candidate

• Day-to-day coordination and collaboration with a wide array of IT groups, Information Security teams, business units, and client delivery teams.
• Perform security monitoring and analysis of security events
• Understanding of popular SIEM platforms like QRadar, Arcsight, Splunk etc
• Experience in Data Loss Prevention Tools from Symantec, Forcepoint, McAfee or Microsoft
• Hands on experience in DLP monitoring is an added advantage.
• MTA / SMTP alerts
• HTTP(s) alerts
• Removable Media alerts
• Printer alerts
• Assist with incident response and investigation activities
• Assist in creation of playbooks for new use cases
• Participate in the agile process to incrementally drive improvement in triage process, reduce time to detect & response, use case fine tuning, metrics etc
• Develop and deliver required metrics and reports
• Develop process and procedure documentation for security platforms / controls managed by SOC

Required Qualifications

• 5+ years of progressive experience in Security Operations Center (SOC)
• Willing to work in 24/7 Environment
• 3 years of Security Monitoring (Incident Response, Playbooks, DLP Incident Analysis, Traffic & Endpoint Analysis, Metrics etc)
• 2 years of progressive information security experience across 1 or more information security/information technology risk management domains such as but not limited to:
• Network Security
• Host/Endpoint Security
• Data Security