19 hours ago
Halifax, CanadaSenior
Responsibilities
- Analyze and remediate application security vulnerabilities found through SAST, DAST, SCA, and penetration testing.
- Review findings from Checkmarx, Fortify, AppScan, SonarQube, and similar security platforms.
- Implement secure coding practices aligned with OWASP Top 10 standards.
- Perform vulnerability root cause analysis and develop sustainable remediation solutions.
- Collaborate with architects, developers, DevOps engineers, and security stakeholders to resolve findings.
- Support SSDLC initiatives and application security compliance requirements.
- Conduct security-focused peer code reviews addressing security, maintainability, and performance.
- Integrate and improve automated security testing and remediation in CI/CD pipelines.
- Provide technical guidance and mentorship on secure software design and vulnerability prevention.
- Help establish application security standards and promote security awareness across project teams.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
- 5-7 years of deep expertise in application security, vulnerability remediation, and secure software development practices.
- Strong enterprise application development experience with Microsoft .NET Framework and/or .NET Core/.NET 8+.
- Extensive experience identifying and remediating application security vulnerabilities.
- Strong understanding of OWASP Top 10, secure coding, authentication and authorization, session management, input validation, encryption, and data protection.
- Hands-on experience with Checkmarx, Fortify, SonarQube, AppScan, Veracode, or similar tools.
- Experience analyzing SAST, DAST, SCA, and penetration testing findings.
- Experience working in Agile software development environments.
- Strong troubleshooting, analytical, and problem-solving skills.
- Excellent verbal and written communication skills.
Benefits
- Annual salary of CAD $61,000-$100,000, depending on experience and qualifications.
- Eligibility for a discretionary annual incentive program.
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and company contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee stock purchase plan.
- Applications accepted until September 17, 2026, though the posting may close earlier; some interviews may be in person at Cognizant offices or client locations.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.