Senior Offensive Security – Penetration Testing & Red Team Engineer

Cognizant; Toronto; On-site; CAD 146,000 - 172,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

Long-term/Short-term Disability

Paid Parental Leave

Job summary

Cognizant is seeking a Senior Offensive Security Engineer to support advanced penetration testing, red team operations, and custom security tool development. The role combines offensive security expertise with software engineering to identify vulnerabilities and simulate real-world attacks, delivering automation that enhances enterprise security testing.

The ideal candidate will have hands-on experience in penetration testing, red teaming, exploit research, and security tooling, with the ability

Qualifications

• 5-8 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
• Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.
• Hands‑on experience conducting penetration testing using industry‑standard methodologies and frameworks.
• Experience participating in red team engagements and adversary simulation exercises.
• Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or equivalent platforms.
• Strong understanding of web application security, API security, cloud security, network security, and vulnerability assessment techniques.
• Experience developing custom security tooling, automation frameworks, and offensive testing solutions.
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

Responsibilities

• Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and vulnerability assessment activities.
• Conduct comprehensive penetration tests against web applications, APIs, cloud environments, networks, and enterprise infrastructure.
• Participate in red team engagements that simulate realistic adversary behavior and attack scenarios.
• Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
• Build integrations between security tools and enterprise platforms to improve testing efficiency and automation capabilities.
• Research emerging attack techniques, offensive security methodologies, and exploit development opportunities.
• Develop proof‑of‑concept exploits, attack simulations, and offensive testing frameworks where appropriate.
• Collaborate with development, infrastructure, and security teams to address identified vulnerabilities and improve security controls.
• Maintain technical documentation, testing methodologies, tooling standards, and security assessment reports.
• Contribute to continuous improvement of offensive security capabilities, red team operations, and security engineering practices.

Skills

Python

Go

Java

C#

PowerShell

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

BloodHound

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking a Senior Offensive Security Engineer to support advanced penetration testing, red team operations, and custom security tool development initiatives. This role combines offensive security expertise with strong software engineering capabilities to identify vulnerabilities, simulate real-world attack scenarios, and develop automation solutions that enhance enterprise security testing. The ideal candidate will have hands‑on experience in penetration testing, red teaming, exploit research, and security tooling, with the ability to both assess and improve organizational security posture through custom‑built solutions.

• Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

In This Role, You Will

• Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and vulnerability assessment activities.
• Conduct comprehensive penetration tests against web applications, APIs, cloud environments, networks, and enterprise infrastructure.
• Participate in red team engagements that simulate realistic adversary behavior and attack scenarios.
• Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
• Build integrations between security tools and enterprise platforms to improve testing efficiency and automation capabilities.
• Research emerging attack techniques, offensive security methodologies, and exploit development opportunities.
• Develop proof‑of‑concept exploits, attack simulations, and offensive testing frameworks where appropriate.
• Collaborate with development, infrastructure, and security teams to address identified vulnerabilities and improve security controls.
• Maintain technical documentation, testing methodologies, tooling standards, and security assessment reports.
• Contribute to continuous improvement of offensive security capabilities, red team operations, and security engineering practices.

What You Need To Have To Be Considered

• 5-8 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
• Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.
• Hands‑on experience conducting penetration testing using industry‑standard methodologies and frameworks.
• Experience participating in red team engagements and adversary simulation exercises.
• Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or equivalent platforms.
• Strong understanding of web application security, API security, cloud security, network security, and vulnerability assessment techniques.
• Experience developing custom security tooling, automation frameworks, and offensive testing solutions.
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

#CB

#Ind123

Applications will be accepted until 8 Sep 2026.

Salary And Other Compensation

The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• Long-term/Short-term Disability
• Paid Parental Leave