**About Cognizant Corporate**

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward\-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose – always guided by our core values. Join us in shaping future of business.

**About the role**

As a Security Specialist, you will be responsible for monitoring, triaging, analysing, and responding to cybersecurity alerts and incidents within a 24x7 Security Operations Centre environment. You will work closely with SOC leadership, security engineers, infrastructure teams, and business stakeholders to strengthen the organisation's cyber defence capabilities and ensure timely response to security threats.

This role provides the opportunity to develop deep technical expertise in threat detection, incident response, security monitoring, use case optimisation, and cybersecurity reporting while contributing to continuous improvement initiatives that enhance the overall security posture of the organisation.

**In this role, you will:**

• Triage security alerts generated by SIEM platforms within defined SLAs and determine validity, criticality, and ownership.
• Investigate confirmed security incidents and provide detailed analysis, recommendations, and remediation guidance to relevant stakeholders.
• Follow established SOPs and playbooks for alert triage, investigation, and incident management activities.
• Handle SOC\-related requests and support activities in a timely and professional manner.
• Own and manage one or more log source types, ensuring log quality, relevance, and coverage for security monitoring.
• Document log event types and maintain log source documentation.
• Map security use cases to available log sources and recommend new detection opportunities.
• Generate scheduled security reports, provide investigation summaries, and communicate findings to stakeholders.
• Support SOC leadership in creating and maintaining SOPs, playbooks, and operational processes.
• Recommend improvements to existing detection use cases, workflows, and response procedures based on emerging threats and lessons learned.
• Produce detailed investigation reports and provide actionable recommendations to improve security posture.
• Support automation initiatives, strategic cybersecurity projects, and continuous improvement efforts.
• Stay updated on emerging threats, security technologies, and industry best practices.
• Embrace our **vibrant** culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Take ownership, build relationships, and focus on personal growth to drive business strategy and foster an inclusive culture.

**What you must have to be considered**

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline.
• Minimum 3\+ years of experience in a Security Operations Centre (SOC) environment.
• Strong understanding of Networking, TCP/IP, OSI Model, Windows and Linux Operating Systems.
• Knowledge of Web Applications, Databases, and common cyber attack techniques.
• Experience with SIEM platforms and security monitoring processes.
• Strong analytical and incident investigation skills.
• Ability to communicate technical risks and findings effectively to both technical and non\-technical stakeholders.
• Experience working with SOPs, security procedures, and incident management processes.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good.
• The embodiment of Cognizant's Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, and Own It.

**These will help you succeed**

• Cybersecurity certifications such as CompTIA Security\+, CEH, SC\-200, CySA\+, GCIH, Splunk Certified User, or equivalent.
• Experience with Microsoft Sentinel, Splunk, QRadar, or similar SIEM technologies.
• Experience with threat hunting, EDR/XDR, and security automation.
• Knowledge of MITRE ATT\&CK framework and modern threat actor techniques.
• Experience creating SOPs, playbooks, and security reports.
• Strong presentation and stakeholder management skills.
• Ability to mentor team members and support knowledge\-sharing initiatives.
• Continuous learning mindset with a passion for cybersecurity research and innovation.

**Work model –**

Hybrid \- Chennai

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position based in Chennai and will support 24x7 SOC operations through rotational shifts. Regardless of your working arrangement, we are here to support a healthy work\-life balance through our various wellbeing programmes.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.