Senior Offensive Security Engineer: Red Team & Pen Testing

Cognizant; Toronto; On-site; CAD 147,000 - 172,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and PTO

Long-term/Short-term Disability

Paid Parental Leave

Job summary

Cognizant Canada is seeking a Senior Offensive Security Engineer to lead advanced penetration testing, red team operations, and custom security tooling initiatives.

You will design automation and run tests across web apps, APIs, cloud environments, and enterprise infrastructure, collaborating with multiple teams to improve security posture.

Note: visa sponsorship is not available for this role; OSCP or equivalent certifications are highly desirable.

Qualifications

• 5–8 years of experience in Penetration Testing or Red Teaming.
• Strong scripting and programming capabilities across established languages.
• Experience with industry security frameworks and methodologies.
• Proficiency in offensive security tooling and automation development.
• Certificates such as OSCP, GPEN, CEH or equivalent are desirable.

Responsibilities

• Design and develop custom security tools and automation frameworks for testing.
• Conduct comprehensive penetration tests of web apps, APIs, cloud, networks, and infrastructure.
• Participate in red team engagements simulating adversary behavior.
• Identify vulnerabilities, document attack paths, and provide remediation guidance.
• Build integrations between security tools and enterprise platforms to increase efficiency.
• Research new attack techniques and develop PoCs and testing frameworks.
• Collaborate with development, infra, and security teams to harden controls.
• Maintain documentation, methodologies, and testing standards.
• Contribute to ongoing improvements of offensive security capabilities.

Skills

Python

Go

Java

C#

PowerShell

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

BloodHound

Job description

Cognizant Canada is seeking a Senior Offensive Security Engineer to lead advanced penetration testing, red team operations, and custom security tooling initiatives.

You will design automation and run tests across web apps, APIs, cloud environments, and enterprise infrastructure, collaborating with multiple teams to improve security posture.

Note: visa sponsorship is not available for this role; OSCP or equivalent certifications are highly desirable.