18 hours ago
Mumbai, IndiaSenior
Responsibilities
- Configure Checkmarx, Prisma Cloud, Veracode, and other security scanning integrations inside Flowsource pipeline templates.
- Codify client security policies as enforceable gates with severity thresholds, allow/deny lists, and time-limited exception workflows.
- Operate vulnerability triage and disclosure workflows, routing findings to the appropriate squad with service-level expectations.
- Build and maintain leadership-facing compliance dashboards covering critical findings, remediation time, and control coverage.
- Partner with DevOps and Pipeline Integrators to keep pipeline security gates consistent across onboarded applications.
- Support client audit readiness by exporting evidence packs, scan histories, gate-enforcement records, and remediation timelines.
- Monitor compliance against SOC 2, PCI DSS, HIPAA, and ISO 27001 frameworks and surface gaps to the FDE Lead.
Requirements
- 6+ years of application security or DevSecOps engineering experience.
- Hands-on experience with at least two of Checkmarx, Prisma Cloud, Veracode, Snyk, or SonarQube security profiles.
- Working knowledge of at least one of SOC 2, PCI DSS, HIPAA, or ISO 27001.
- Experience with container image scanning and infrastructure-as-code scanning; Trivy, Checkov, tfsec, and kube-bench are helpful.
- Ability to build executive-facing reporting and communicate policy with security leadership and tooling requirements with developers.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.