Senior .NET Application Security Developer

Cognizant; Halifax; On-site; CAD 61,000 - 100,000; Full time

Benefits offered by this job

Medical Insurance

Paid Holidays

401(k) Plan

Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Senior .NET Application Security Developer in Canada with 5–7 years of deep security expertise. The role involves independently analyzing and remediating security vulnerabilities across enterprise applications and driving secure software practices.

You will review security scan findings, implement secure coding standards, and collaborate with cross-functional teams to enhance security across the SDLC. Strong communication and mentoring skills are required.

Qualifications

• Bachelor's degree or equivalent professional experience in a related field.
• Strong experience in enterprise .NET development and security remediation.
• Expertise in OWASP Top 10 and secure coding practices.

Responsibilities

• Analyze and remediate application security vulnerabilities identified by SAST, DAST, SCA, and pen tests.
• Review findings from Checkmarx, Fortify, AppScan, SonarQube and similar tools.
• Implement secure coding practices and SDLC security controls.

Skills

Application security

Secure coding

OWASP Top 10

Security testing

CI/CD security

Education

Bachelor's degree in CS/IT/Engineering

Tools

Checkmarx

Fortify

SonarQube

AppScan

Veracode

Job description

Senior .NET Application Security Developer

Cognizant is seeking a Senior .NET Application Security Developer within 5-7 years of deep expertise in application security, vulnerability remediation, and secure software development practices. This role is ideal for a seasoned .NET professional who can independently analyze, prioritize, and remediate security vulnerabilities across enterprise applications with minimal onboarding support.

The ideal candidate will possess extensive hands-on experience reviewing security scan findings, implementing secure coding standards, and collaborating with cross-functional teams to improve the overall security posture of applications. From Day 1, the candidate should be capable of evaluating security reports and implementing effective remediation strategies across the software development lifecycle.

Key Responsibilities

• Analyze and remediate application security vulnerabilities identified through SAST, DAST, SCA, and penetration testing assessments.
• Review and address findings generated by security tools such as Checkmarx, Fortify, AppScan, SonarQube, and similar platforms.
• Implement secure coding practices following OWASP Top 10 standards and industry best practices.
• Perform root cause analysis of security vulnerabilities and provide sustainable remediation solutions.
• Collaborate with architects, developers, DevOps engineers, and security stakeholders to ensure timely resolution of security findings.
• Support Secure Software Development Lifecycle (SSDLC) initiatives and maintain compliance with security requirements.
• Participate in peer code reviews with a focus on security, maintainability, and performance.
• Integrate and improve automated security testing and remediation capabilities within CI/CD pipelines.
• Provide technical guidance and mentorship to development teams on secure software design and vulnerability prevention.
• Assist in establishing application security standards and promoting security awareness across project teams.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• Strong experience developing enterprise applications using Microsoft .NET Framework and/or .NET Core/.NET 8+.
• Extensive experience identifying and remediating application security vulnerabilities.
• Strong understanding of:
  • OWASP Top 10
  • Secure Coding Practices
  • Authentication and Authorization
  • Session Management
  • Input Validation
  • Encryption and Data Protection
• Hands-on experience with security scanning tools such as:
  • Checkmarx
  • Fortify
  • SonarQube
  • AppScan
  • Veracode or similar platforms
• Experience analyzing findings from:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
  • Penetration Testing Reports
• Experience working in Agile software development environments.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent verbal and written communication skills.

Work Authorization

Candidate must be legally authorized to work in Canada without the need for employer sponsorship now or in the future.

Why Apply?

At Cognizant, you will work alongside some of the world's leading technology experts to solve complex business challenges while helping organizations strengthen their security posture. We are committed to fostering an inclusive environment where innovation, collaboration, and professional growth are encouraged.

We're excited to meet people who share our mission and can make an impact in a variety of ways.

Salary and Other Compensation

The annual salary for this position is between CAD $61,000 and CAD $100,000, depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits

Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical, Dental, Vision, and Life Insurance
• Paid Holidays plus Paid Time Off
• 401(k) Plan and Company Contributions
• Long-Term and Short-Term Disability Coverage
• Paid Parental Leave
• Employee Stock Purchase Plan

Application Deadline

Applications for this position will be accepted until 9/17/2026. Candidates are encouraged to apply as early as possible, as the posting may close sooner if a sufficient pool of qualified applicants is identified.

Disclaimer

The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Please note: Some roles may require in-person interviews at Cognizant offices or client locations, depending on project or client requirements.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or any other characteristic protected by applicable law.