SOC Analyst 1

About the role

Cognizant is a leading professional services company offering modernization of technology, enhanced security, and protection of critical information assets. They support secure, resilient, and compliant operations in complex and regulated environments.

Role Summary

The SOC Analyst I supports day-to-day security operations by monitoring, analyzing, and responding to security incidents. This role collaborates with other security team members to enhance threat visibility, detect and prevent malicious activity, and safeguard organizational data, systems, and intellectual property.

Responsibilities

• Investigate and analyze escalated security incidents, including malware, phishing, insider threats, and advanced threats.
• Support and participate in incident response activities across all phases of the incident lifecycle.
• Utilize SIEM, UEBA, and related security tools to analyze logs, correlate events, and identify suspicious activity.
• Conduct proactive threat hunting by identifying indicators of compromise and abnormal behavior patterns.
• Collaborate with security engineering teams to tune and optimize detection tools to improve effectiveness and reduce false positives.
• Perform forensic analysis to determine scope, impact, and root cause of security incidents.
• Partner with governance, risk, and compliance teams to prioritize and track remediation of identified vulnerabilities.
• Develop clear and detailed incident reports with analysis and recommendations.
• Contribute to incident response playbooks, processes, and security documentation.
• Collaborate with and support other SOC analysts through knowledge sharing and operational coordination.
• Identify opportunities to improve security monitoring, response processes, and overall security posture.

Qualifications

• 2–6 years of experience in security operations, incident response, SOC analysis, or related cybersecurity roles.
• Hands-on experience with SIEM and security analytics platforms.
• Working knowledge of threat detection, incident response, and security monitoring practices.
• Strong analytical, investigative, and documentation skills.

Preferred Qualifications

• Experience with security platforms such as Securonix, DLP solutions, EDR, and SOAR technologies.
• Scripting or automation experience (e.g., Python).
• Industry certifications such as Security+, GSEC, CySA+, or equivalent.
• Experience contributing to continuous improvement within a security operations environment.