Senior Offensive Security – Penetration Testing & Red Team Engineer

About the Position

We are seeking a Senior Offensive Security Engineer to support advanced penetration testing, red team operations, and custom security tool development initiatives. This role combines offensive security expertise with strong software engineering capabilities to identify vulnerabilities, simulate real-world attack scenarios, and develop automation solutions that enhance enterprise security testing.

Responsibilities

• Design and develop custom security tools, automation frameworks, and scripts to support penetration testing and vulnerability assessment activities.
• Conduct comprehensive penetration tests against web applications, APIs, cloud environments, networks, and enterprise infrastructure.
• Participate in red team engagements that simulate realistic adversary behavior and attack scenarios.
• Identify, validate, and document vulnerabilities, attack paths, and security weaknesses with actionable remediation recommendations.
• Build integrations between security tools and enterprise platforms to improve testing efficiency and automation capabilities.
• Research emerging attack techniques, offensive security methodologies, and exploit development opportunities.
• Develop proof-of-concept exploits, attack simulations, and offensive testing frameworks where appropriate.
• Collaborate with development, infrastructure, and security teams to address identified vulnerabilities and improve security controls.
• Maintain technical documentation, testing methodologies, tooling standards, and security assessment reports.
• Contribute to continuous improvement of offensive security capabilities, red team operations, and security engineering practices.

Requirements

• 5-8 years of experience in Penetration Testing, Red Teaming, Security Engineering, or Software Development with a strong security focus.
• Strong programming and scripting expertise in languages such as Python, Go, Java, C#, PowerShell, or similar technologies.
• Hands-on experience conducting penetration testing using industry-standard methodologies and frameworks.
• Experience participating in red team engagements and adversary simulation exercises.
• Proficiency with offensive security tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, BloodHound, or equivalent platforms.
• Strong understanding of web application security, API security, cloud security, network security, and vulnerability assessment techniques.
• Experience developing custom security tooling, automation frameworks, and offensive testing solutions.
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and penetration testing best practices.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

We Offer

• Compensation: The annual salary for this position is between $105,500 - $124,000 depending on experience and other qualifications of the successful candidate.
• Benefits:
  • Medical/Dental/Vision/Life Insurance
  • Paid holidays plus Paid Time Off
  • Long-term/Short-term Disability
  • Paid Parental Leave

About the Company

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process, and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes, and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or follow us on Twitter.

Application Process

Applications will be accepted until October 23, 2026.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government-issued ID during each interview.

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status, or any other characteristic protected by federal, state, or local laws.

Applicants for US-based positions must be currently authorized to work for any employer in the United States. The company is unable to provide employment-based immigration sponsorship for US-based positions.

If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] for roles based in the Americas or [email protected] for roles based in India.