Cyber Security Engineer - Cognizant

Key Responsibilities

Security Platform Operations & Administration

• Manage and maintain enterprise cybersecurity platforms, including:
  • Next-Generation Firewalls (NGFW)
  • Endpoint Detection & Response (EDR)
  • Privileged Access Management (PAM)
  • DDoS Protection and Web Application Security Platforms
• Perform preventive maintenance, health checks, platform upgrades, patching, and configuration reviews to ensure optimal performance and security.
• Monitor platform health, security events, logs, alerts, and operational status to identify and resolve issues proactively.
• Coordinate with vendors and internal teams for troubleshooting, platform support, escalations, and technical enhancements.

• Administer enterprise firewall environments, including:
  • Security policy management
  • Access control reviews
  • Firewall rule optimization
  • Configuration backup and recovery
  • Firmware and software patching
• Conduct periodic reviews of firewall configurations and access controls to maintain compliance with security policies.
• Support security assessments, audits, and infrastructure security reviews.
• Assist in change implementation, network troubleshooting, and incident investigation activities.

• Administer and maintain Endpoint Detection & Response (EDR) platforms.
• Monitor endpoint security health, sensor coverage, platform performance, and log collection.
• Troubleshoot endpoint-related security issues and support onboarding of new assets.
• Coordinate with vendors for platform upgrades, advanced troubleshooting, and system enhancements.

• Support enterprise DDoS protection and web application security platforms.
• Manage onboarding and offboarding of internet-facing applications and websites.
• Review access controls, platform reports, security alerts, and administrative activities.
• Support:
  • IP whitelisting and blacklisting
  • SSL certificate management
  • WAF policy administration
  • Security configuration reviews
• Work with security and operations teams to continuously improve platform effectiveness against evolving threats.

• Administer privileged access management solutions and privileged accounts.
• Manage privileged account onboarding, offboarding, password management, and access reviews.
• Support privileged session monitoring, audit reviews, and access governance activities.
• Ensure privileged access processes comply with organizational security standards and controls.

• Ensure cybersecurity platforms comply with internal security policies, regulatory requirements, and industry best practices.
• Participate in audits, security assessments, and compliance reviews.
• Support change management processes, including:
  • Change reviews
  • Risk assessments
  • Implementation planning
  • Operational readiness validation
• Maintain security documentation, SOPs, architecture diagrams, asset inventories, and operational procedures.

• Support cybersecurity incident investigation and response activities.
• Perform log analysis and forensic data collection for security investigations.
• Assist in identifying root causes, implementing remedial actions, and preventing recurrence of incidents.
• Prepare incident reports and support post-incident reviews.

• Maintain platform backup and recovery procedures.
• Verify backup integrity and support periodic restoration testing.
• Ensure backup and recovery practices align with operational and security requirements.
• Support business continuity and disaster recovery readiness activities.

• Minimum 5 years of experience in Cybersecurity Engineering, Security Operations, Infrastructure Security, or Cyber Platform Administration.
• Minimum 2 years of experience supporting Singapore Government, Statutory Boards, Public Sector agencies, or highly regulated environments.
• Experience managing enterprise security platforms in production environments.
• Strong understanding of:
  • Cybersecurity operations
  • Security monitoring
  • Security governance
  • Platform lifecycle management
  • Change management processes
• Experience working with vendors, support providers, and internal stakeholders.
• Strong analytical, troubleshooting, and incident management capabilities.
• Excellent communication and stakeholder management skills.

• Enterprise Networking:
  • TCP/IP
  • VLANs
  • Routing
  • NAT
  • DNS
  • Network Segmentation
  • Traffic Flow Analysis
• Firewall Administration:
  • Palo Alto Networks or equivalent Next-Generation Firewall solutions
• Endpoint Security:
  • Carbon Black, CrowdStrike, Microsoft Defender, SentinelOne, or equivalent EDR platforms
• Privileged Access Management:
  • CyberArk or equivalent PAM solutions
• DDoS Protection and WAF Platforms:
  • Cloudflare, Akamai, F5, Imperva, or similar technologies
• Security Operations:
  • Log analysis
  • Security monitoring
  • Incident response
  • Vulnerability management
  • Security hardening
• Operating Systems:
  • Linux (Red Hat preferred)
  • Windows Server

• Experience supporting Critical Information Infrastructure (CII) or highly secure environments.
• Knowledge of:
  • Air-gapped environments
  • Secure file transfer processes
  • Network isolation controls
  • PKI and certificate lifecycle management
• Familiarity with:
  • Cybersecurity audits
  • Security compliance frameworks
  • Patch management processes
  • Change management methodologies