12 days ago
Toronto, CanadaSenior
Base Salary
$106k - $124k/yr
Responsibilities
- Design and develop custom security tools, automation frameworks, scripts, and integrations for penetration testing and vulnerability assessment.
- Conduct penetration tests against web applications, APIs, cloud environments, networks, and enterprise infrastructure.
- Participate in red team engagements and adversary simulation exercises.
- Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
- Research offensive security techniques, develop proof-of-concept exploits, and improve testing frameworks and red team capabilities.
- Collaborate with development, infrastructure, and security teams to address vulnerabilities and improve security controls.
Requirements
- 5-8 years of experience in penetration testing, red teaming, security engineering, or security-focused software development.
- Strong programming and scripting expertise in Python, Go, Java, C#, PowerShell, or similar technologies.
- Hands-on penetration testing experience using industry-standard methodologies and frameworks.
- Experience with red team engagements and adversary simulation exercises.
- Proficiency with tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, and BloodHound.
- Understanding of web application, API, cloud, and network security, as well as vulnerability assessment techniques.
- Experience developing custom security tooling, automation frameworks, and offensive testing solutions.
- Familiarity with MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
- Security certifications such as OSCP, CRTO, PNPT, GPEN, or CEH are highly desirable.
Benefits
- Annual salary range of $105,500-$124,000 depending on experience and qualifications.
- Eligibility for a discretionary annual incentive program based on performance.
- Medical, dental, vision, and life insurance.
- Paid holidays, paid time off, and paid parental leave.
- Long-term and short-term disability benefits.
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.