Job Summary
We are seeking a mid-level engineer to identify manage and remediate application vulnerabilities throughout the software development lifecycle. This role plays a key part in maintaining our security posture across web mobile and cloud-based applications. Ideal candidates will have deep technical curiosity and practical experience with vulnerability scanning security assessments prioritization and coordination of remediation efforts.
Responsibilities
Execute and support application vulnerability assessments (SAST DAST SCA and manual code review) ensuring findings are accurate actionable and relevant to application risk.
Validate scanner results perform false-positive analysis and track findings through remediation including retesting to confirm effective fixes.
Manage multiple application security initiatives concurrently while meeting strict timelines in a fast paced environment.
Prioritize vulnerabilities based on business impact exploitability exposure and likelihood using industry best practices (e.g. CVSS scoring).
Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution remediation SLAs and mean time to remediation (MTTR).
Support the integration of security scanning and vulnerability workflows into CI/CD pipelines leveraging existing tooling and automation.
Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
Support threat modeling and application risk assessments with a focus on discovering insecure design patterns.
Participate in high-severity or zero-day vulnerability response activities including impact analysis and coordinated remediation efforts as needed.
Provide input into policies and standards related to application and cloud security controls.
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.
