Application Security Champion (Software Engineering)
About the role
As an Application Security Champion (Software Engineering), you will make an impact by embedding security into the software development lifecycle and partnering with engineering teams to deliver secure, resilient, and compliant applications. You will be a valued member of the Engineering and Security team and work collaboratively with software architects, developers, DevOps engineers, product owners, QA teams, security stakeholders, and cross-functional technology teams to proactively identify risks, strengthen application security posture, and drive secure-by-design principles across enterprise platforms.
In this role, you will:
• Integrate security throughout the Software Development Lifecycle (SDLC), partnering closely with development teams to ensure secure design, development, testing, and deployment practices.
• Analyze and remediate vulnerabilities identified through SAST, SCA, DAST, IAST, penetration testing, and other security assessment activities while providing technical guidance to engineering teams.
• Conduct threat modeling exercises using methodologies such as STRIDE to identify attack vectors, assess risks, and recommend effective mitigation strategies.
• Promote secure coding practices aligned with OWASP Top 10 and industry standards through code reviews, developer enablement, and security awareness initiatives.
• Leverage automation and AI-assisted security tools to streamline vulnerability management, improve remediation workflows, and enhance overall security operations efficiency.
Work Model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a client or Cognizant office in Phoenix, AZ. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
What you need to have to be considered
• 8+ years of experience in Application Security, Product Security, Software Engineering, or Cybersecurity roles.
• Strong experience embedding security into Agile and DevSecOps development environments.
• Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Interactive Application Security Testing (IAST), and vulnerability management processes.
• Experience conducting application penetration testing across web applications, APIs, and mobile applications.
• Strong knowledge of secure coding principles, OWASP Top 10, security architecture, and application security best practices.
• Experience performing threat modeling using methodologies such as STRIDE and assessing risks using frameworks such as CVSS.
• Proficiency reviewing application source code and providing remediation guidance for vulnerabilities within Java, .NET, or similar development environments.
• Experience integrating security controls and automated testing into CI/CD pipelines using tools such as GitLab, Jenkins, or equivalent DevOps platforms.
• Strong understanding of vulnerability lifecycle management, security risk assessment, and remediation tracking processes.
• Experience collaborating with software development, architecture, QA, and DevOps teams to design and implement secure applications.
• Excellent communication, leadership, and stakeholder management skills with the ability to influence secure engineering practices across organizations.
• Experience mentoring developers and engineering teams on application security concepts and secure software development methodologies.
These will help you stand out
• Experience leveraging AI-driven security tools and automated remediation platforms to improve vulnerability management and developer productivity.
• Experience securing cloud-native applications, microservices architectures, APIs, and containerized workloads.
• Knowledge of banking, financial services, fintech, or other highly regulated industry security requirements.
• Experience conducting security reviews for REST and SOAP APIs.
• Familiarity with DevSecOps frameworks and security automation within enterprise CI/CD environments.
• Experience reducing false positives through optimization and tuning of SAST, DAST, and other security scanning solutions.
• Strong understanding of security architecture reviews, secure design patterns, and application hardening techniques.
• Experience participating in or leading security champions programs within large engineering organizations.
• Security certifications such as CSSLP, GWAPT, OSCP, CEH, CISSP, Security+, or related credentials.
• Experience driving security culture initiatives and establishing security-first engineering practices across development teams.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Salary and Other Compensation:
Applications will be accepted until July 24, 2026.
The annual salary for this position is between $63,000 - $125,000 depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits:
Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan
Disclaimer:
The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Acerca de Cognizant
Cognizant (Nasdaq: CTSH) es un creador de soluciones de IA y proveedor de servicios tecnológicos que conecta la inversión en IA con el valor empresarial mediante el desarrollo de soluciones de IA full‑stack para sus clientes. Su profundo conocimiento de la industria, junto con su experiencia en procesos e ingeniería, permite incorporar el contexto único de cada organización en sistemas tecnológicos que amplifican el potencial humano, generan resultados tangibles y mantienen a las empresas a la vanguardia en un entorno en constante cambio. Más información en cognizant.ai o @cognizant.
Información adicional sobre el empleo
La información sobre la compensación es exacta en la fecha de publicación de este anuncio. Cognizant se reserva el derecho de modificar esta información en cualquier momento, de conformidad con la legislación aplicable.
Es posible que se solicite a los solicitantes que asistan a entrevistas de forma presencial o mediante videoconferencia. Asimismo, durante cada entrevista, los candidatos podrán estar obligados a presentar un documento de identidad válido emitido por el estado o por el gobierno.
Cognizant es un empleador que ofrece igualdad de oportunidades. Su solicitud y candidatura no se evaluarán en función de la raza, el color, el sexo, la religión, el credo, la orientación sexual, la identidad de género, el origen nacional, la discapacidad, la información genética, el embarazo, la condición de veterano ni cualquier otra característica protegida por las leyes federales, estatales o locales.
