28 days ago
Mumbai, IndiaSenior
Responsibilities
- Configure Checkmarx, Prisma Cloud, Veracode, and related scanning integrations within Flowsource pipeline templates.
- Codify client security policies as enforceable gates with severity thresholds, allow/deny lists, and exception workflows.
- Operate vulnerability triage and disclosure workflows, routing findings to the appropriate squads with service-level targets.
- Build and maintain leadership-facing compliance dashboards covering critical findings, remediation time, and control coverage.
- Partner with DevOps and the Pipeline Integrator to keep pipeline gates consistent across onboarded applications.
- Support client audit readiness by exporting evidence packs, scan histories, gate enforcement records, and remediation timelines.
- Monitor client compliance frameworks and surface gaps to the FDE Lead.
Requirements
- 6+ years of application security or DevSecOps engineering experience.
- Hands-on experience with at least two of Checkmarx, Prisma Cloud, Veracode, Snyk, and SonarQube security profiles.
- Working knowledge of at least one of SOC 2, PCI DSS, HIPAA, and ISO 27001.
- Experience with container image scanning and IaC scanning; Trivy, Checkov, and tfsec are helpful.
- Ability to build executive-facing reporting and communicate policy with security leadership and tooling details with developers.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.