Senior Offensive Security – Penetration Testing & Red Team Engineer, Toronto, Ontario, Canada

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking a Senior Offensive Security Engineer to support advanced penetration testing, red team operations, and custom security tool development initiatives. This role combines offensive security expertise with strong software engineering capabilities to identify vulnerabilities, simulate real-world attack scenarios, and develop automation solutions that enhance enterprise security testing. The ideal candidate will have hands-on experience in penetration testing, red teaming, exploit research, and security tooling, with the ability to both assess and improve organizational security posture through custom-built solutions.

*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

In this role, you will:

· Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and vulnerability assessment activities.

· Conduct comprehensive penetration tests against web applications, APIs, cloud environments, networks, and enterprise infrastructure.

· Participate in red team engagements that simulate realistic adversary behavior and attack scenarios.

· Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.

· Build integrations between security tools and enterprise platforms to improve testing efficiency and automation capabilities.

· Research emerging attack techniques, offensive security methodologies, and exploit development opportunities.

· Develop proof-of-concept exploits, attack simulations, and offensive testing frameworks where appropriate.

· Collaborate with development, infrastructure, and security teams to address identified vulnerabilities and improve security controls.

· Maintain technical documentation, testing methodologies, tooling standards, and security assessment reports.

· Contribute to continuous improvement of offensive security capabilities, red team operations, and security engineering practices.

What you need to have to be considered

· 5-8 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.

· Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.

· Hands-on experience conducting penetration testing using industry-standard methodologies and frameworks.

· Experience participating in red team engagements and adversary simulation exercises.

· Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or equivalent platforms.

· Strong understanding of web application security, API security, cloud security, network security, and vulnerability assessment techniques.

· Experience developing custom security tooling, automation frameworks, and offensive testing solutions.

· Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.

· Strong analytical, troubleshooting, communication, and documentation skills.

· Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 8 Sep 2026.

Salary and Other Compensation:

The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

· Medical/Dental/Vision/Life Insurance

· Paid holidays plus Paid Time Off

· Long-term/Short-term Disability

· Paid Parental Leave

Sobre a Cognizant
Cognizant (NASDAQ: CTSH) é uma construtora de IA e fornecedora de serviços de tecnologia, criando a ponte entre o investimento em IA e o valor para as empresas por meio do desenvolvimento de soluções de IA completas para nossos clientes. Nossa profunda experiência em setores, processos e engenharia nos permite incorporar o contexto único de cada organização em sistemas tecnológicos que potencializam a capacidade humana, geram resultados tangíveis e mantêm empresas globais à frente em um mundo em rápida transformação. Saiba mais em cognizant.ai ou @cognizant.

A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.

Informações adicionais de emprego
Os candidatos podem ser obrigados a comparecer a entrevistas presenciais ou por videoconferência. Além disso, os candidatos podem ser obrigados a apresentar seu documento de identificação emitido pelo estado ou governo atual durante cada entrevista.

Embora nosso sistema permita a candidatura em todos os idiomas, o(s) idioma(s) e o(s) nível(is) de proficiência exigidos para o trabalho variam. No entanto, é necessário um nível básico de inglês para fins de comunicação em toda a empresa.

Se você tem uma deficiência que requer adaptações razoáveis para procurar uma vaga de emprego ou enviar uma candidatura, envie um e-mail para [email protected] com sua solicitação e informações de contato.