Threat Hunting & Security Validation Engineer

Cognizant; Blaine (MN); On-site; USD 115,000 - 134,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays + PTO

401(k) plan

Job summary

Cognizant is seeking a Cybersecurity Analyst to advance threat hunting, security validation, and BAS capabilities. You will work with SOC, Incident Response, and Engineering teams to enhance threat detection and response.

Ideal candidates have hands-on Splunk experience and a solid grasp of MITRE ATT&CK, with 4–8 years in related roles and strong scripting skills in Python, PowerShell, or Bash.

Qualifications

• 4-8 years of Cybersecurity, Threat Hunting, Security Operations, Detection Engineering, or Security Validation experience.
• Hands-on experience with Threat Hunting, Security Validation, BAS, or related cybersecurity disciplines.
• Deep understanding of the MITRE ATT&CK framework and adversary TTPs.
• Experience using Splunk for security investigations, threat analysis, and log correlation.
• Knowledge of security monitoring, detection engineering, and threat intelligence concepts.
• Proficiency in scripting and automation using Python, PowerShell, Bash, or similar.

Responsibilities

• Conduct proactive threat hunting to identify indicators of compromise, suspicious behaviors, and threats.
• Perform Security Validation and BAS to evaluate security controls and detection capabilities.
• Analyze security events and telemetry using Splunk and other monitoring tools.
• Review and improve detection rules, searches, and alerting mechanisms.
• Map threats to MITRE ATT&CK and support control validation efforts.
• Develop automation scripts to enhance threat hunting processes.
• Collaborate with SOC, IR, Threat Intelligence, and Engineering teams.
• Document findings, recommendations, and remediation actions.

Skills

Threat Hunting

Security Operations

Breach & Attack Simulation

MITRE ATT&CK

Scripting

Tools

Splunk

Python

PowerShell

Bash

Job description

Cognizant is seeking a Cybersecurity Analyst to advance threat hunting, security validation, and BAS capabilities. You will work with SOC, Incident Response, and Engineering teams to enhance threat detection and response.

Ideal candidates have hands-on Splunk experience and a solid grasp of MITRE ATT&CK, with 4–8 years in related roles and strong scripting skills in Python, PowerShell, or Bash.