4 days ago
Halifax, CanadaSenior
Responsibilities
- Analyze and remediate application security vulnerabilities found through SAST, DAST, SCA, and penetration testing.
- Review findings from Checkmarx, Fortify, AppScan, SonarQube, Veracode, and similar tools.
- Implement secure coding practices based on OWASP Top 10 and perform vulnerability root cause analysis.
- Collaborate with architects, developers, DevOps engineers, and security stakeholders to resolve findings.
- Support SSDLC initiatives, security compliance, secure code reviews, and automated security testing in CI/CD pipelines.
- Provide technical guidance and mentorship on secure software design and vulnerability prevention.
- Help establish application security standards and promote security awareness across project teams.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
- 5–7 years of deep expertise in application security, vulnerability remediation, and secure software development.
- Strong enterprise application development experience with Microsoft .NET Framework and/or .NET Core/.NET 8+.
- Strong understanding of OWASP Top 10, secure coding, authentication and authorization, session management, input validation, encryption, and data protection.
- Hands-on experience with Checkmarx, Fortify, SonarQube, AppScan, Veracode, or similar security scanning platforms.
- Experience analyzing SAST, DAST, SCA, and penetration testing findings.
- Experience in Agile software development environments.
- Strong troubleshooting, analytical, problem-solving, verbal, and written communication skills.
Benefits
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and company contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee Stock Purchase Plan.
- Applicants must be legally authorized to work in Canada without employer sponsorship now or in the future.
- Applications are accepted until September 17, 2026, subject to earlier closure; some interviews may be in person at Cognizant offices or client locations.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant