Cybersecurity Specialist

Cognizant; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

A leading tech firm in Ontario is seeking a Cyber Security Specialist. The role involves securing API development and implementing CI/CD pipelines. Ideal candidates have 6-9 years in software development, with a focus on security, proficient in Python, JavaScript, or Java, and experienced in threat modeling. Competitive compensation and opportunities for cloud security projects are included.

Qualifications

• 6-9 years total experience in software development and DevOps, with at least 2-3 years hands-on security exposure.

Responsibilities

• Secure API development, design and develop RESTful APIs.
• Work with PostgreSQL to optimize and secure data structures.
• Contribute to system architecture with security by design.
• Automate security scans and compliance checks.
• Implement CI/CD pipelines for secure deployments.
• Apply secure coding frameworks and vulnerabilities prevention.

Skills

Secure coding (OWASP Top 10, SANS CWE)

API security (OAuth2, JWT, input validation)

CI/CD security integration (SAST, DAST, dependency scanning)

Programming in Python, JavaScript, Java, or Go

PostgreSQL database security

Threat modeling & secure architecture reviews

Security automation scripting

Tools

AWS

GCP

Azure

Docker

Kubernetes

Terraform

Ansible

Job description

Job Title - Cyber Security Specialist

Responsibilities

• Secure API development – Design and develop RESTful APIs and integrations with strong authentication, authorization, and data protection measures.
• Work with PostgreSQL and other RDBMS to query, optimize, and secure data structures against injection attacks, data leakage, and unauthorized access.
• Contribute to system architecture with Security by Design, including threat modeling and secure design reviews at the planning stage.
• Write scripts to automate security scans, compliance checks, and reduce manual effort in security monitoring and deployment workflows.
• Proficiency in Python, JavaScript, Java, or Go with a focus on secure coding standards (e.g., OWASP Top 10 mitigation).
• Implement CI/CD pipelines with integrated SAST, DAST, dependency scanning, and secrets management for secure deployments.
• Deep application of secure coding frameworks, vulnerability prevention, and industry best practices (OWASP, SANS).
• Strong problem-solving and debugging skills for both functional and security-related issues in dev, test, and prod environments.
• Collaborate closely with developers, operations, and security teams to embed a culture of security across all cross-functional work.

Primary Skills

• Secure coding (OWASP Top 10, SANS CWE)
• API security (OAuth2, JWT, input validation)
• CI/CD security integration (SAST, DAST, dependency scanning)
• Programming in Python, JavaScript, Java, or Go
• PostgreSQL database security
• Threat modeling & secure architecture reviews
• Security automation scripting

Good to Have

• Cloud security (AWS/GCP/Azure)
• Container security (Docker/K8s, image scanning)
• IaC security (Terraform, Ansible)
• Security compliance (SOC 2, ISO 27001)

Ideal Experience Range

• 6-9 years total experience in software development and DevOps, with at least 2 - 3 years hands-on security exposure (secure coding, pipeline security, API security, threat modeling)