Senior .NET Developer – Application Security

Cognizant; Halifax; Hybrid; CAD 80,000 - 94,000; Full time

Benefits offered by this job

Discretionary annual incentive

Wellbeing programs

Hybrid work arrangement

Job summary

Cognizant is seeking a Senior .NET Developer – Application Security to strengthen enterprise app security through vulnerability analysis, remediation, and secure development practices. You will work with architects, DevOps, developers, and cybersecurity stakeholders to deliver secure, compliant solutions.

The role includes hands-on vulnerability remediation, secure coding across .NET apps, and collaboration with cross-functional teams to ensure timely fixes.

Qualifications

• Must have a Bachelor's degree in a related field.
• Proven hands-on experience building enterprise .NET apps in secure SDLC contexts.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with security testing tools (SAST/DAST/SCA) and remediation.
• Ability to analyze findings and implement long-term fixes efficiently.

Responsibilities

• Analyze and remediate application security vulnerabilities identified through testing.
• Implement secure coding practices across .NET/C# projects.
• Review findings from Checkmarx, Fortify, AppScan, and SonarQube.
• Perform root cause analysis and sustainable remediation.
• Collaborate with DevOps, architecture, and security teams to fix issues.
• Support Secure SDLC and ensure compliance with requirements.
• Conduct secure code reviews focusing on security and performance.
• Contribute to CI/CD pipeline improvements with automated security checks.
• Provide mentorship on secure development practices.

Skills

NET & C#

Security vulnerabilities

OWASP Top 10

SAST/DAST/SCA

Security scanning tools

CI/CD security

Independent remediation

Education

Bachelor's degree in Computer Science/IT/Software Engineering

Tools

Checkmarx

Fortify

AppScan

SonarQube

Job description

Senior .NET Developer – Application Security

About the role

As a Senior .NET Developer, you will make an impact by strengthening the security posture of enterprise applications through vulnerability analysis, remediation, and secure software development practices. You will be a valued member of the application development and security team, collaborating with architects, DevOps engineers, developers, and cybersecurity stakeholders to deliver secure, resilient, and compliant solutions.

In this role, you will:

• Analyze and remediate application security vulnerabilities identified through SAST, DAST, SCA, and penetration testing assessments.
• Implement secure coding practices across .NET applications in alignment with OWASP standards and industry best practices.
• Review, investigate, and resolve security findings generated by tools such as Checkmarx, Fortify, AppScan, SonarQube, and similar platforms.
• Perform root cause analysis of security issues and implement sustainable remediation strategies to prevent recurrence.
• Collaborate with development, architecture, DevOps, and security teams to ensure timely resolution of identified vulnerabilities.
• Support Secure SDLC initiatives and ensure compliance with organizational and client application security requirements.
• Conduct code reviews with a strong focus on security, maintainability, and application performance.
• Contribute to CI/CD pipeline improvements by integrating automated security scanning and remediation processes.
• Provide technical guidance and mentorship on secure development practices and vulnerability prevention.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a client or Cognizant office. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

What you need to have to be considered

• Bachelor's degree in Computer Science, Information Technology, Software Engineering, or a related field.
• Strong hands-on experience developing enterprise applications using .NET and C#.
• Proven experience identifying, analyzing, and remediating application security vulnerabilities.
• Deep understanding of OWASP Top 10 vulnerabilities, secure coding principles, and application security best practices.
• Experience working with SAST, DAST, SCA, and penetration testing reports.
• Hands-on experience with security scanning tools such as Checkmarx, Fortify, AppScan, SonarQube, or equivalent.
• Experience performing root cause analysis and implementing long-term security fixes.
• Familiarity with CI/CD pipelines and integrating automated security controls within software delivery processes.
• Ability to work independently and begin reviewing and remediating security findings with minimal onboarding support.
  

These will help you stand out

• Security-related certifications such as CSSLP, GWAPT, GSEC, Security+, or similar.
• Experience securing applications hosted in cloud environments such as Azure or AWS.
• Knowledge of DevSecOps methodologies and automated compliance frameworks.
• Experience with threat modeling, secure architecture reviews, and security risk assessments.
• Strong communication skills with the ability to influence technical and non-technical stakeholders.

Compensation

The annual salary for this position ranges from $80,000 to $93,500, depending on experience and qualifications. This role is also eligible for Cognizant’s discretionary annual incentive program, subject to performance and applicable plan terms.

Disclaimer:

The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

We're excited to meet people who share our mission and can make an impact in a variety of ways.