4 days ago
Philadelphia, PA, USASenior
Base Salary
$90k - $130k/yr
Responsibilities
- Administer, configure, and optimize Black Duck for software composition analysis and open-source governance.
- Develop and maintain integrations using Black Duck APIs and security automation workflows.
- Partner with development and R&D teams to embed security practices throughout the software development lifecycle.
- Analyze vulnerabilities, recommend remediation strategies, and track resolution.
- Conduct security assessments, reviews, and risk evaluations for product releases.
- Support memory leak and memory soak testing, mobile application security, security patching, cryptographic agility, or modern encryption initiatives.
- Support threat modeling, secure design reviews, and security architecture discussions.
- Drive continuous improvement of product security processes, tools, and governance.
Requirements
- 8+ years of experience in cybersecurity, product security, or application security.
- Strong hands-on experience with Black Duck and software composition analysis.
- Experience with Black Duck APIs and security tool integrations.
- Deep understanding of secure software development and product security principles.
- Knowledge of vulnerability management, CVE analysis, and remediation practices.
- Experience integrating security into CI/CD pipelines and DevSecOps environments.
- Strong communication and stakeholder management skills.
- Preferred: secure coding and application security testing experience; knowledge of OWASP Top 10, SBOM, open-source risk management, and supply chain security; familiarity with AWS, Azure, or GCP; and certifications such as CISSP, CSSLP, GWAPT, or GSEC.
Benefits
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee Stock Purchase Plan.
- Onsite position.
- Eligible for COLA and a discretionary annual incentive program based on performance and applicable plan terms.
Tech Stack
Categories
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant