Senior Penetration Tester & Red Team Engineer
- Toronto, ON, Canada
The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate. · Full-time
Applications open in a new tab.
Job details
- Pay
- The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.
- Job type
- Full-time
- Apply by
- Experience
- · 3–5 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
- Posting language
- English
- Posted
Original job description
About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.
Job Summary
We are seeking a Senior Penetration Tester / Red Team Engineer to support offensive security initiatives through advanced penetration testing, red team operations, and custom security tool development. This role combines hands-on security engineering with offensive security expertise to identify vulnerabilities, simulate real-world attack scenarios, and develop automation solutions that enhance security assessment capabilities. The ideal candidate will possess strong software development skills, a deep understanding of security testing methodologies, and experience conducting enterprise security assessments.
*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*
In this role, you will:
· Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and red team operations.
· Conduct comprehensive penetration testing of web applications, APIs, cloud platforms, networks, and enterprise infrastructure.
· Participate in red team engagements that emulate real-world adversaries to evaluate organizational security defenses.
· Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
· Build integrations between security tools, enterprise platforms, and automation workflows to improve testing efficiency and coverage.
· Research and develop offensive security techniques, attack simulations, and proof-of-concept exploits for emerging threats.
· Support security engineering initiatives by solving complex technical challenges requiring both development and cybersecurity expertise.
· Collaborate with development, infrastructure, and security teams to improve security posture and address identified risks.
· Maintain detailed documentation of testing methodologies, findings, tools, and operational procedures.
· Contribute to continuous improvement of penetration testing, red teaming, and security automation capabilities across the organization.
What you need to have to be considered
· 3–5 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
· Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.
· Hands-on experience conducting penetration testing using industry-standard methodologies and frameworks.
· Experience participating in red team engagements and adversary simulation exercises.
· Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or similar platforms.
· Strong understanding of web application security, API security, network security, and cloud security concepts.
· Experience developing custom security tools, automation scripts, or offensive security utilities.
· Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
· Excellent analytical, troubleshooting, documentation, and communication skills.
· Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.
Applications will be accepted until 30 Sep 2026.
Salary and Other Compensation:
The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
· Medical/Dental/Vision/Life Insurance
· Paid holidays plus Paid Time Off
· Long-term/Short-term Disability
· Paid Parental Leave
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email CareersNA2@cognizant.com for roles based in the Americas or CareersIndia2@cognizant.com for roles based in India.
More about this job
Responsibilities
The role involves conducting advanced penetration testing and red team operations to identify vulnerabilities across web applications, APIs, and cloud infrastructure. Additionally, the engineer will develop custom security tools and automation frameworks to enhance organizational security posture.
Requirements
Candidates must have 3–5 years of experience in offensive security or software development with strong programming skills in languages like Python or Go. Proficiency in industry-standard security tools and frameworks such as MITRE ATT&CK and OWASP Top 10 is essential.
Skills
- Penetration testing
- Red teaming
- Security engineering
- Python
- Go
- Java
- C#
- PowerShell
- Burp Suite
- Metasploit
- Nmap
- Cobalt Strike
- BloodHound
- Cloud security
- API security
- Network security
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Paid holidays
- Paid time off
- Long-term disability
- Short-term disability
- Paid parental leave
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Software
- Consulting
- Engineering
Keywords
- Penetration Testing
- Red Team
- Security Engineering
- Python
- Go
- Java
- C#
- PowerShell
- Burp Suite
- Metasploit
- Nmap
- Cobalt Strike
- BloodHound
- Cloud Security
- API Security
- Network Security
- MITRE ATT&CK
- OWASP Top 10
- OSCP
- CRTO
- PNPT
- GPEN
- CEH
- Automation
- Vulnerability Assessment
- Adversary Simulation
- Offensive Security
- Cybersecurity
- Infrastructure Security
- Software Development