Security Analyst (SOC)

Cognizant has an opening for a Security Analyst (SOC) in Delhi. If you would rather learn by owning something small and real than by watching from the sidelines, this full-time security operations role is built that way. About the role The Security Analyst (SOC) role at Cognizant centres on monitoring real alerts, separating the noise from the genuine incidents and escalating with evidence. Expect a SIEM platform and threat intelligence feeds to be your working environment, and expect to be asked why you made a decision as often as what you built. Key responsibilities • Monitor and triage security alerts on shift • Investigate suspicious activity and document findings • Escalate confirmed incidents with the evidence attached • Tune detections to cut false positives • Maintain incident records and shift handovers • Document what you build so the next person does not have to reverse-engineer it • Take part in reviews — both having your work reviewed and reviewing others’ Required skills and tools • SIEM Tools • Alert Triage • Log Analysis • MITRE ATT&CK • Networking (TCP/IP) • Windows & Linux Logs • Incident Documentation • Phishing Analysis • Threat Detection • Escalation Process Eligibility criteria • Education: B.E./B.Tech (CSE/IT/ECE), BCA/MCA or B.Sc/M.Sc (Computer Science / IT). Candidates from any recognised university are welcome. • Graduation year: 2023–2026 batches. Freshers and final-year students awaiting results may apply. • Minimum 60% / 6.0 CGPA in the highest qualification (indicative — strong practical skills can offset this). • Experience: 0–2 years in a related field, through internships, projects or prior full-time work. • Technical skills: SIEM Tools, Alert Triage, Log Analysis, MITRE ATT&CK, Networking (TCP/IP), Windows & Linux Logs. • Soft skills: clear written communication, the willingness to ask early rather than guess, ownership of your own work, and the patience to see a problem through. Salary and compensation • Annual CTC: ₹3,80,000 – ₹7,70,000 per year (3.8 LPA – 7.7 LPA), an indicative market range for this role in Delhi. • Monthly equivalent: approximately ₹48,000 per month at the mid-point of the range. • Currency: INR (₹). • Performance bonus / variable pay as per Cognizant's policy, reviewed annually. • The exact offer is confirmed by Cognizant based on your interview performance and current compensation. Perks and benefits • Flexible working hours around core collaboration time • Modern hardware and the tool licences your role needs • Internal knowledge sessions and access to senior reviewers • Clear, written progression criteria rather than an annual surprise • Employee referral and performance bonus schemes • Team offsites and regular in-person time • Support for internal mobility across teams • Fixed monthly salary, paid on time Location, work mode and employment type • Location: Delhi, Delhi • Work mode: Work From Office • Employment type: Full-time, permanent • Working hours: Standard business hours, Monday to Friday (5-day week) • Number of openings: 5 • Joining: immediate to 60 days, as per your notice period Selection process • Round 1 — Resume screening and profile shortlisting by the talent acquisition team • Round 2 — Short introductory call with the recruiter about your background and interest • Round 3 — Technical or practical round based on the day-to-day work of the role • Round 4 — Take-home exercise or live problem-solving discussion • Round 5 — HR discussion — compensation, notice period, joining date and offer roll-out Who should apply Candidates from B.E./B.Tech (CSE/IT/ECE), BCA/MCA or B.Sc/M.Sc (Computer Science / IT) with up to 2 years of relevant experience who are based in Delhi or willing to relocate. You should be comfortable with SIEM Tools, Alert Triage, Log Analysis and Be ready to talk through one thing you built or worked on in detail, including what you would do differently now.. A portfolio, GitHub profile or project write-up helps but is not mandatory. Why join Cognizant Feedback at Cognizant is frequent and specific, and it runs both ways — new joiners are expected to say when a process does not make sense. There is a defined path from this level to the next, with written criteria rather than an annual surprise. People who want to go deeper technically and people who want to move towards product, operations or management both have a route. You will leave every year of this role with triaged incidents and the detections you tuned. How to apply Click Apply Now. If you are not signed in you will be asked to log in or create a free MyInternships.in candidate account first, after which you will be taken directly to Cognizant's official careers page to submit your application. Applications close on 21 October 2026 and are reviewed on a rolling basis, so apply early. Additional information • Documents required at the interview stage: updated resume, degree certificates or provisional certificate, and government photo ID. • Experienced candidates should also carry recent payslips and a relieving or experience letter. • There is no service bond for this position, and no equipment deposit is taken. • A laptop and the software licences the role needs are provided by Cognizant for office and hybrid roles. • Cognizant and MyInternships.in never charge a fee at any stage of the application, selection or onboarding process. If anyone asks you for money in the name of this job, do not pay — report it. Responsibilities: Monitor and triage security alerts on shift; Investigate suspicious activity and document findings; Escalate confirmed incidents with the evidence attached; Tune detections to cut false positives; Maintain incident records and shift handovers; Flag risks and blockers early rather than at the deadline; Keep your tracker and status honest, including when something has slipped. Requirements: B.E./B.Tech (CSE/IT/ECE), BCA/MCA or B.Sc/M.Sc (Computer Science / IT) from a recognised university; 0–2 years of relevant experience — internships, academic projects and personal work all count, and 2026 graduates are welcome; Working knowledge of SIEM Tools, Alert Triage, Log Analysis; Comfort with a SIEM platform and threat intelligence feeds, and the ability to pick up an unfamiliar tool without waiting to be taught it; The judgement to know when a problem is yours to solve and when it needs escalating — and to escalate with the relevant detail attached.; Attention to detail, ownership and the discipline to document your work; Based in Delhi, Delhi or willing to relocate.