3 days ago
Halifax, CanadaSenior
Responsibilities
- Analyze and remediate application security vulnerabilities identified through SAST, DAST, SCA, and penetration testing.
- Review findings from Checkmarx, Fortify, AppScan, SonarQube, and similar security platforms.
- Implement OWASP Top 10-aligned secure coding practices and perform root cause analysis of vulnerabilities.
- Collaborate with architects, developers, DevOps engineers, and security stakeholders to resolve security findings.
- Support SSDLC initiatives, security compliance, peer code reviews, and automated security testing improvements.
- Provide technical guidance and mentorship on secure software design and vulnerability prevention.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
- 5-7 years of deep expertise in application security, vulnerability remediation, and secure software development practices.
- Strong enterprise application development experience with Microsoft .NET Framework and/or .NET Core/.NET 8+.
- Strong understanding of OWASP Top 10, secure coding, authentication and authorization, session management, input validation, encryption, and data protection.
- Hands-on experience with Checkmarx, Fortify, SonarQube, AppScan, Veracode, or similar security scanning platforms.
- Experience analyzing SAST, DAST, SCA, and penetration testing findings.
- Experience in Agile software development environments and strong troubleshooting, analytical, communication, and problem-solving skills.
Benefits
- Medical, dental, vision, and life insurance.
- Paid holidays and paid time off.
- 401(k) plan and company contributions.
- Long-term and short-term disability coverage.
- Paid parental leave.
- Employee stock purchase plan.
- Applicants must be legally authorized to work in Canada without employer sponsorship now or in the future.
- Applications are accepted until September 17, 2026, and the posting may close earlier if sufficient qualified applicants are identified; some interviews may be in person at Cognizant offices or client locations.
Tech Stack
SonarQube
Categories
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant