We require an 8+ Years experienced SOC professional who will be responsible for working on escalated events, evidence collection, analyses, perform forensic investigation, find the root cause of the incident, provide trouble shooting steps.

The primary function of this position is to work as a Microsoft Sentinel Expert who can perform alert management, high level investigation which includes but not limited to log analysis, forensic evidence collection, analysis, find the root cause and provide remediation steps.

• Security Operation Centre (SOC) L3
• Incident response
• Security incident investigation & triage
• Threat hunting
• Forensics analysis
• Malware analysis
• Microsoft Sentinel
• Level 3 SOC Support
• Tool experience - MS Sentinel, MS Defender, SentinelOne

Key Responsibilities Include:

• Investigate escalated incidents from Tier 2 analysts, including advanced persistent threats (APTs) and zero-day attacks.

• Perform root cause analysis and identify the scope of a breach.

• Conduct proactive threat hunting based on threat intelligence and anomalous patterns in logs.

• Develop hypotheses for undetected threats and test them against collected SIEM logs.

• Use forensic tools (e.g. FTK, Wireshark) for investigations.

• Develop custom detection rules for SIEM and EDR tools to improve detection capabilities.

• Fine-tune existing rules to reduce false positives and improve efficiency.

• Lead major incident response efforts and guide T1 and T2 analysts.

• Prepare detailed reports and executive summaries for stakeholders.

• Work closely with Threat Intelligence and Red Teams to enhance detection capabilities.

• Mentor and train junior analysts on advanced techniques and tools.

Skills and Qualifications:

• Advanced knowledge of SIEM, EDR, forensic tools, and malware analysis.

• Deep understanding of networking (e.g., firewalls, IDS/IPS), operating systems (Windows/Linux), and attack techniques (MITRE ATT&CK).

• Leadership skills to guide junior analysts and manage high-pressure incidents.

• Strong communication skills for translating technical findings into actionable insights.

• 3+ years of experience in cybersecurity, with expertise in SOC operations.

• Certifications (Nice to have): CISSP, GIAC GCIH, GCFA, OSCP, or equivalent.
• Preference will be given to candidate with MS Azure Security Certified Engineers, GIAC or SANS certified Engineers and candidates with prior knowledge working on Azure Sentinel SIEM tool. Azure Sentinel knowledge is mandatory for this position.

Application Accepted: 11/25/2025

The annual salary for this position is between $ 90 K- 100K depending on experience and other qualifications of the successful candidate

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Our strength is built on our ability to work together. Our diverse backgrounds offer different perspectives and new ways of thinking. It encourages lively discussions, creativity, productivity, and helps us build better solutions for our clients. We want someone who thrives in this setting and is inspired to craft meaningful solutions through true collaboration.

If you are content with ambiguity, excited by change, and excel through autonomy, we’d love to hear from you!

#LI-AV1#CB#Ind123

The Cognizant community:
We are a high caliber team who appreciate and support one another. Our people uphold an energetic, collaborative and inclusive workplace where everyone can thrive.

• Cognizant is a global community with more than 300,000 associates around the world.
• We don’t just dream of a better way – we make it happen.
• We take care of our people, clients, company, communities and climate by doing what’s right.
• We foster an innovative environment where you can build the career path that’s right for you.

About us:
Cognizant is one of the world's leading professional services companies, transforming clients' business, operating, and technology models for the digital era. Our unique industry-based, consultative approach helps clients envision, build, and run more innovative and efficient businesses. Headquartered in the U.S., Cognizant (a member of the NASDAQ-100 and one of Forbes World’s Best Employers 2025) is consistently listed among the most admired companies in the world. Learn how Cognizant helps clients lead with digital at www.cognizant.com

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.

If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email CareersNA2@cognizant.com with your request and contact information.

Disclaimer:
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.