Senior Penetration Tester & Red Team Engineer

Cognizant; Toronto; On-site; CAD 106,000 - 124,000; Full time

Benefits offered by this job

Discretionary annual incentive

Disability benefits

Job summary

Cognizant's Cloud Infrastructure & Security Services Practice is seeking a Senior Penetration Tester / Red Team Engineer to advance offensive security through testing, red team engagements, and custom tool development in a large enterprise.

The role involves designing security tools, performing comprehensive security assessments of web apps, APIs, cloud platforms, networks, and infrastructure, and collaborating with cross-functional teams. Visa sponsorship is not available.

Qualifications

• 3–5 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a security focus.
• Proficiency with offensive security tools and methodologies.
• Strong programming/scripting in Python, Go, Java, C#, PowerShell or similar.

Responsibilities

• Design and develop custom security tools, automation frameworks, and scripts for penetration testing and red team operations.
• Conduct comprehensive penetration testing of web apps, APIs, cloud platforms, networks, and enterprise infrastructure.
• Participate in red team engagements to emulate real-world adversaries and evaluate defenses.
• Identify, document, and remediate vulnerabilities with actionable guidance.
• Build integrations between security tools and automation workflows to improve testing efficiency.
• Research offensive security techniques and develop exploits for emerging threats.
• Collaborate with development, infrastructure, and security teams to improve security posture.
• Maintain thorough documentation of testing methodologies and findings.
• Contribute to ongoing improvement of testing and security automation capabilities across the organization.

Skills

Python

Go

Java

C#

PowerShell

Offensive security

Burp Suite

Metasploit

Nmap

Cobalt Strike

BloodHound

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

BloodHound

Job description

About Cloud Infrastructure & Security Services:

Cognizant's Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking a Senior Penetration Tester / Red Team Engineer to support offensive security initiatives through advanced penetration testing, red team operations, and custom security tool development. This role combines hands‑on security engineering with offensive security expertise to identify vulnerabilities, simulate real-world attack scenarios, and develop automation solutions that enhance security assessment capabilities. The ideal candidate will possess strong software development skills, a deep understanding of security testing methodologies, and experience conducting enterprise security assessments.

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

In this role, you will:

• Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and red team operations.
• Conduct comprehensive penetration testing of web applications, APIs, cloud platforms, networks, and enterprise infrastructure.
• Participate in red team engagements that emulate real-world adversaries to evaluate organizational security defenses.
• Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
• Build integrations between security tools, enterprise platforms, and automation workflows to improve testing efficiency and coverage.
• Research and develop offensive security techniques, attack simulations, and proof-of-concept exploits for emerging threats.
• Support security engineering initiatives by solving complex technical challenges requiring both development and cybersecurity expertise.
• Collaborate with development, infrastructure, and security teams to improve security posture and address identified risks.
• Maintain detailed documentation of testing methodologies, findings, tools, and operational procedures.
• Contribute to continuous improvement of penetration testing, red teaming, and security automation capabilities across the organization.

What you need to have to be considered

• 3-5 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
• Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.
• Hands‑on experience conducting penetration testing using industry-standard methodologies and frameworks.
• Experience participating in red team engagements and adversary simulation exercises.
• Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or similar platforms.
• Strong understanding of web application security, API security, network security, and cloud security concepts.
• Experience developing custom security tools, automation scripts, or offensive security utilities.
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
• Excellent analytical, troubleshooting, documentation, and communication skills.
• Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

Applications will be accepted until 30 Sep 2026.

Salary and Other Compensation:

The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Long-term/Short-term Disability

About Cognizant:

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization's unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.

Additional employment information

Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.

If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [e-mail] for roles based in the Americas or [e-mail] for roles based in India.