4 days ago
Halifax, CanadaSenior
Responsibilities
- Analyze and remediate application security vulnerabilities identified through SAST, DAST, SCA, and penetration testing.
- Review findings from Checkmarx, Fortify, AppScan, SonarQube, Veracode, and similar security platforms.
- Implement secure coding practices aligned with OWASP Top 10 standards.
- Perform root cause analysis and develop sustainable vulnerability remediation solutions.
- Collaborate with architects, developers, DevOps engineers, and security stakeholders to resolve findings.
- Support Secure Software Development Lifecycle initiatives and security compliance requirements.
- Conduct security-focused peer code reviews.
- Integrate and improve automated security testing and remediation in CI/CD pipelines.
- Provide technical guidance and mentorship on secure software design and vulnerability prevention.
- Help establish application security standards and increase security awareness across project teams.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
- 5–7 years of deep expertise in application security, vulnerability remediation, and secure software development practices.
- Strong experience developing enterprise applications with Microsoft .NET Framework and/or .NET Core/.NET 8+.
- Extensive experience identifying and remediating application security vulnerabilities.
- Understanding of OWASP Top 10, secure coding, authentication and authorization, session management, input validation, encryption, and data protection.
- Hands-on experience with Checkmarx, Fortify, SonarQube, AppScan, Veracode, or similar security scanning platforms.
- Experience analyzing SAST, DAST, SCA, and penetration testing reports.
- Experience in Agile software development environments.
- Strong troubleshooting, analytical, and problem-solving skills.
- Excellent verbal and written communication skills.
- Must be legally authorized to work in Canada without employer sponsorship now or in the future.
Benefits
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and company contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee stock purchase plan.
- Annual discretionary incentive program eligibility based on performance and applicable plan terms.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant