Email Threat & Endpoint Security Analyst

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values.

About the role

As an Email Threat & Endpoint Security Analyst, you will drive impactful contributions and focus on outcomes as a member of Corporate Security’s Global Cyber Operations team. Acting as the first line of cyber defense, you will monitor and respond to cyberattacks emerging from email. You will also support endpoint-security activities, including assessing and managing vulnerabilities affecting Cognizant workstations.

You will collaborate with IT groups, Information Security teams, business units, client delivery teams, and other Corporate Security teams. This role requires careful analysis of high volumes of alerts, responsible handling of sensitive information, attention to detail, and a commitment to continuous learning as email threats and tactics evolve.

In this role, you will:

• Monitor email-alert queues during 24x7 shifts, primarily using Proofpoint email-security tools, to detect, analyze, and respond to phishing, spoofing, malware, business email compromise, malicious attachments, and other email-based threats.
• Analyze user-reported phishing emails, follow established Standard Operating Procedures, identify true-positive alerts, and block indicators of compromise in accordance with approved processes.
• Perform vulnerability scans and initial analysis across servers, workstations, and network devices; validate scan results; identify false positives; and coordinate the remediation and closure of high or critical vulnerabilities.
• Maintain accurate case records, security advisories, workflows, tool documentation, reports, dashboards, and daily, weekly, or monthly metrics.
• Collaborate with SOC, DFIR, CTI, SIEM, Engineering, IT, infrastructure, application-owner, business, and client-delivery teams; escalate complex or unresolved issues and critical risks to designated leads, managers, or Level 2 analysts.
• Embrace our vibrant culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Prioritize quality, stay curious, and commit to continuous learning. Take ownership, build relationships, and focus on personal growth to drive business strategy and create impactful work.

What you must have to be considered

• A bachelor’s degree in computer science, electronics and communication, computer applications, cybersecurity, information security, or a related field.
• Experience in networking, Security Operations Center operations, or another security domain, including exposure to email security.
• Hands-on experience with Proofpoint email-security technologies, such as Email Protection, Targeted Attack Protection, Threat Response Auto-Pull, or Proofpoint Threat Response.
• Detailed knowledge of email flow, email-header and content analysis, sandboxing, threat analysis, and email authentication mechanisms, including SPF, DKIM, and DMARC.
• Working knowledge of vulnerability-management tools, such as Qualys or Microsoft Defender for Endpoint, and basic knowledge of system-hardening standards and methods.
• Strong analytical capabilities, including correlation, contextual thinking, attention to detail, and decision-making under uncertainty.
• Clear written and verbal communication skills, including the ability to explain technical risks to nontechnical stakeholders, document investigations and actions, collaborate across functions, adapt to change, and deliver presentations.
• Willingness to work 24x7 rotational shifts and adjust schedules to collaborate with associates across U.S. and international time zones.
• The ability to identify subtle indicators of phishing, spoofing, malicious attachments, patterns, and anomalies in email traffic while handling sensitive information responsibly.
• A strong sense of ownership, a desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
• The embodiment of Cognizant’s values: Work as One, Dare to Innovate, Raise the Bar, Do the Right Thing, and Own It.

These will help you succeed

• Experience in vulnerability management.
• Relevant certifications such as CompTIA Security+, CEH, CCNA, or Microsoft SC-200.
• Proofpoint Certified Administrator, Proofpoint Certified Analyst, or a comparable Proofpoint certification.
• Qualys or Microsoft vulnerability-management certification.
• Python or PowerShell scripting knowledge.
• Familiarity with data-analysis and visualization tools such as Power BI.
• Experience suggesting or applying AI, scripting, or other automation tools to streamline security analysis and reporting.