Front-End Security Auditor (Web Extensions)

Cognizant; Lisboa; Presencial; EUR 40 000 - 65 000; Tempo integral

Resumo da oferta

Cognizant is seeking a curious, analytical JavaScript/Front End professional to understand how malicious software operates in browser-based applications, with a focus on web extensions. You will audit code, assess true behavior, and identify security risks at scale, collaborating with cross-functional teams.

The role requires hands-on technical skills and a proactive mindset to improve detection capabilities and tooling across projects.

Qualificações

• Strong hands-on JavaScript with advanced concepts (closures, prototypes, scope).
• Proficiency in HTML and CSS.
• Experience in code review and assessing real behavior vs. declared functionality.
• Experience with SQL queries.

Responsabilidades

• Analyze browser extension code using static and dynamic analysis to identify security violations.
• Perform code reverse engineering and debugging for JavaScript front-end tech.
• Review extension source code to determine actual behavior vs. declared functionality.
• Identify, document, and report security vulnerabilities with remediation actions.
• Support investigation and takedown of malicious browser extensions.
• Audit internal review/detection tools to identify gaps or flaws.
• Define and implement detection rules to identify security violations at scale.
• Contribute to process improvements and automation for efficiency.
• Provide technical guidance and collaborate with cross-functional teams.

Conhecimentos

JavaScript

HTML/CSS

Code review

SQL

Analytical mindset

Ferramentas

Burp Suite

Nmap

Descrição da oferta de emprego

Cognizant is seeking a curious, analytical JavaScript/Front End professional to understand how malicious software operates in browser-based applications, with a focus on web extensions. You will audit code, assess true behavior, and identify security risks at scale, collaborating with cross-functional teams.

The role requires hands-on technical skills and a proactive mindset to improve detection capabilities and tooling across projects.