About the roleAs a
Senior Software Engineer - Penetration Testing & Red Teaming, you will make an impact by bridging software development and offensive security to strengthen enterprise defenses. You will be a valued member of the Threat & Vulnerability Management (TVM) team and work collaboratively with engineering, DevOps, and cybersecurity stakeholders.
In this role, you will:- Design and develop custom security tools and automation scripts to support penetration testing and vulnerability assessment initiatives
- Solve complex engineering challenges that require deep expertise in both software development and cybersecurity
- Build integrations between security tools and enterprise platforms to improve security workflows and automation
- Conduct comprehensive penetration testing across applications, infrastructure, and systems to identify vulnerabilities
- Participate in and support red team operations to simulate real-world attack scenarios and validate security controls
Work model:We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position requiring 2-3 days a week in a client or Cognizant office in Toronto, Ontario. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
What you need to have to be considered:- 6-8 years of experience in security engineering or software development with a strong security focus
- Advanced software development skills with proficiency in one or more programming languages (e.g., Python, JavaScript, Java, or similar)
- Hands-on experience with penetration testing methodologies and tools
- Experience participating in or leading red team engagements
- Familiarity with offensive security tools such as Burp Suite, Metasploit, and similar platforms
- Strong understanding of application, infrastructure, and system security principles
These will help you stand out:- Experience developing custom security tooling or automation frameworks
- Deep understanding of attacker tactics, techniques, and procedures (TTPs)
- Exposure to cloud and container security environments
- Strong problem-solving mindset with the ability to think like an attacker while building secure systems
- Excellent communication skills with the ability to clearly document findings and provide remediation guidance
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply-even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out and bring fresh perspectives to this role.
We regularly assess market data to ensure we offer a competitive compensation package for our associates. The base salary for this position ranges between $ 105,000 - $120,000 per year. Where the successful candidate may fall within the range depends on relevant education, work and/or management experience and other business-related and job-necessary qualifications. This position is also eligible for Cognizant's discretionary annual performance-based bonus, as well as benefits that support your physical, mental and financial wellbeing.
Cognizant will only consider applicants for this position who are legally authorized to work in Canada without requiring employer sponsorship, now or at any time in the future.
Applications will be accepted until June 28, 2026.
