Security Testing

Cognizant; Amsterdam; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

NS Business Card for public transport

Laptop and smartphone provided

Pension scheme

25 paid holidays per year

Udemy and Cognizant Academy access

Job summary

Cognizant is seeking a Security Professional in the Netherlands to serve as the dedicated security focal point across the software delivery lifecycle. You will collaborate with Engineering, Architecture, Risk, Security, and Product teams to design, build, and operate secure, compliant solutions.

You will embed security in the SDLC, lead vulnerability remediation, support audits, and promote DevSecOps practices across teams, while delivering security trainings and governance across projects.

Qualifications

• 3–5 years in Cyber Security, Security Engineering, DevOps, IT Risk Management.
• Strong Agile/DevOps with secure SDLC/DevSecOps practices.
• Foundational knowledge of OWASP Top 10, IAM, encryption and key management.

Responsibilities

• Act as primary security contact, promoting security awareness and secure-by-design practices across all delivery teams.
• Embed security throughout the SDLC—from requirements to production with threat modelling and secure coding practices; integrate SAST, DAST, SCA into CI/CD.
• Lead vulnerability reviews, remediation, support penetration testing and security assessments; respond to security incidents and fraud threats.
• Support audits, risk assessments, and control reviews; maintain security documentation and report on security posture and KPIs.
• Deliver training and coaching on secure development; champion DevSecOps and CISO frameworks across teams.

Skills

Cyber Security

Security Engineering

DevOps

Software Engineering

IT Risk Management

Stakeholder Management

Education

Bachelor's degree in Computer Science or related field

Tools

Azure

Pega

Job description

About The Role

As a Security Professional you will make an impact by serving as the dedicated security focal point, driving a secure‑by‑design culture across the full software delivery lifecycle. You will be a valued member of the Tech team and work collaboratively with Engineering, Architecture, Risk, Security, and Product stakeholders to design, build, and operate secure, resilient solutions that meet both internal standards and external regulatory requirements.

In This Role, You Will

• Act as primary security contact, promoting security awareness, ownership, and secure‑by‑design practices across all delivery teams.


• Embed security throughout the SDLC — from requirements through to production — including threat modelling, architecture reviews, secure coding practices, and integration of security testing (SAST, DAST, SCA) into CI/CD pipelines.


• Lead vulnerability reviews and remediation activities, support penetration testing and security assessments, and respond to security incidents and fraud‑related threats.


• Ensure compliance with internal policies and external regulations by supporting audits, risk assessments, and control reviews, while maintaining security documentation and reporting on security posture and KPIs.


• Deliver training, workshops, and coaching on secure development practices, and champion the adoption of DevSecOps, Stable & Secure by Design, and CISO frameworks across teams.

Work Model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position requiring a set number of days per week in a Cognizant or client office in the Netherlands. Regardless of your working arrangement, we are here to support a healthy work‑life balance through our various wellbeing programs. The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.

What You Need to Have to Be Considered

• 3–5 years of experience in Cyber Security, Security Engineering, DevOps, Software Engineering, or IT Risk Management.


• Solid experience working in Agile and DevOps environments, with a strong understanding of secure SDLC and DevSecOps practices.


• Proven experience with vulnerability management, security controls, and security monitoring frameworks.


• Strong stakeholder management and cross‑functional collaboration skills, with the ability to influence and advise engineering, architecture, risk, and business teams.


• Foundational knowledge of OWASP Top 10, threat modelling, IAM, authentication, authorisation, encryption, key management, and network security principles.


• Bachelor's degree in Computer Science, Cyber Security, Information Security, IT, or Engineering — or equivalent practical experience.

These Will Help You Stand Out

• Experience in banking, financial services, fraud prevention, sanctions, or other regulated environments.


• Hands‑on cloud security experience, preferably with Microsoft Azure (AZ-900, SC-900, or other Microsoft Security Certifications are a plus).


• Background in DevSecOps, penetration testing, audit, and security assessments.


• Familiarity with Pega and/or Pega Cloud security.


• Relevant certifications such as Security+, PenTest+, GISF, CISSP, CISM, CEH, CCSP, or GIAC credentials.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.

What We Offer

• Competitive salary aligned with your experience and the market


• Access to Udemy and Cognizant Academy for continuous learning and development


• NS Business Card for public transport


• 25 paid holidays per year


• Laptop and smartphone provided


• Pension scheme


• Work in a technology‑driven organisation with an open team spirit and truly international environment