Senior Penetration Tester / Red Team Engineer

Join Cognizant as a Senior Penetration Tester / Red Team Engineer and help strengthen enterprise security through hands-on offensive assessments. This onsite role in New York, NY focuses on simulating real-world attacker behavior to uncover weaknesses across modern technology stacks and deliver evidence-based findings that drive remediation. You will also work with a team that supports professional growth while partnering across application, infrastructure, cloud, and security groups.

Compensation: $134,000 to $154,500 per year, depending on experience and other qualifications. This position is eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

What you’ll do

• Conduct comprehensive penetration testing across web applications, APIs, networks, cloud environments, mobile applications, and Windows/Linux systems.
• Perform vulnerability assessments using automated scanning platforms along with advanced manual testing to identify exploitable weaknesses.
• Simulate realistic adversary scenarios to evaluate authentication, authorization, access controls, network defenses, and overall security resilience.
• Identify and validate issues such as vulnerabilities, misconfigurations, exposed credentials, insecure code, and potential attack paths.
• Use offensive security tooling including Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, and vulnerability scanning platforms.
• Build Python and Bash scripts (and similar automation utilities) to improve penetration testing efficiency and coverage.
• Document assessment methodologies, technical evidence, risk impact, and findings, including clear remediation recommendations.
• Collaborate with application, infrastructure, cloud, and security teams to remediate findings and validate fixes through retesting.
• Research emerging threats, CVEs, OWASP vulnerabilities, exploitation techniques, and evolving offensive security methodologies.
• Support security assessments, compliance initiatives, risk reviews, and continuous improvement of the organization’s offensive security capabilities.

What you’ll bring

• 8+ years of hands-on experience in Penetration Testing, Red Teaming, Offensive Security, or Security Engineering.
• Expert-level experience conducting penetration tests across web applications, networks, APIs, endpoints, cloud platforms, and enterprise infrastructure.
• Strong expertise in vulnerability exploitation, attack-path analysis, credential security, authentication testing, and security control validation.
• Advanced hands-on experience using offensive security tools such as Burp Suite, Metasploit, Nmap, Kali Linux, Pentera Console/Surface, and vulnerability scanners.
• Strong scripting and automation skills using Python, Bash, PowerShell, or similar technologies.
• Deep understanding of OWASP, CVE/CVSS, MITRE ATT&CK, network security, application security, and modern attack methodologies.
• Experience working with development and infrastructure teams to provide remediation guidance and perform validation/retesting of security fixes.
• Strong technical reporting skills to communicate vulnerabilities, business impact, and remediation priorities to both technical and leadership audiences.
• Relevant certifications such as OSCP, OSEP, OSWE, GPEN, GXPN, CRTO, or equivalent offensive security certifications are preferred.

Skills and tools

• Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, Pentera Console/Surface
• Python, Bash, PowerShell
• OWASP, CVE/CVSS, MITRE ATT&CK

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan