Senior Offensive Security Engineer

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking a Senior Offensive AI Security Engineer to evaluate and operationalize AI-enabled penetration testing, attack simulation, and security validation platforms. This role combines traditional offensive security expertise with AI/LLM security, cloud security, vulnerability management, and security automation. The ideal candidate will conduct web and API penetration testing, assess agentic AI and LLM risks, and integrate findings into enterprise vulnerability workflows. This position requires strong Python and API development skills, sound security architecture judgment, and experience working with emerging AI security technologies.

In this role, you will:

• Conduct penetration testing and attack simulations across web applications, APIs, cloud environments, containers, identity systems, and network security controls.
• Evaluate and operationalize AI-enabled penetration testing platforms such as Tenzai, Alt Security, Armadin, or comparable solutions.
• Perform AI red teaming to identify prompt injection, model misuse, sensitive data exposure, agentic workflow abuse, and guardrail failures.
• Develop threat models for LLM applications, RAG pipelines, AI agents, model integrations, and enterprise AI workloads.
• Validate vulnerabilities through controlled exploitation techniques and provide clear risk impact and remediation guidance.
• Integrate security findings with vulnerability management, exposure management, ServiceNow, reporting, and remediation workflows.
• Develop security automation using Python, PowerShell, Bash, REST APIs, and JSON to support testing, data extraction, reporting, and workflow orchestration.
• Conduct architecture reviews, SaaS onboarding assessments, third-party risk evaluations, and security solution integration reviews.
• Define operational processes, technical governance artifacts, testing standards, and implementation guidance for new security platforms.
• Collaborate with Application Security, Cloud Security, Vulnerability Management, DevSecOps, Threat Intelligence, and Security Architecture teams.

What you need to have to be considered

• 6–10 years of experience in Penetration Testing, Offensive Security, Red Teaming, Application Security, Vulnerability Management, or Security Engineering.
• Strong hands-on expertise in web application and API penetration testing, threat modeling, vulnerability exploitation, and attack simulation.
• Experience assessing AI/LLM security risks, including prompt injection, agentic AI abuse, model misuse, RAG security, and AI guardrail validation.
• Strong knowledge of Azure security architecture, IAM, network security controls, container security, and SaaS security considerations.
• Experience with vulnerability lifecycle management, exposure management, remediation workflows, and ServiceNow integrations.
• Proficiency in Python, REST APIs, JSON, PowerShell, and Bash for security automation, integration, and reporting.
• Experience conducting security architecture reviews, SaaS onboarding assessments, and third-party technology evaluations.
• Familiarity with Power BI, KQL, Splunk, security data normalization, risk aggregation, and security metrics is preferred.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, threat hunting, adversary emulation, and threat intelligence is desirable.
• Experience integrating security controls into GitHub Actions, Azure DevOps, CI/CD security gates, and Infrastructure as Code workflows is preferred.
• Security certifications such as OSCP, CRTO, PNPT, GPEN, CEH, or equivalent are highly desirable.

Applications will be accepted until 30 Oct 2026.

Salary and Other Compensation:

The annual salary for this position is between $[105,500 - 134,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

· Medical/Dental/Vision/Life Insurance

· Paid holidays plus Paid Time Off

· Long-term/Short-term Disability

· Paid Parental Leave

Additional employment information

Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.

Applicants for US based positions must be currently authorized to work for any employer in the United States. The company is unable to provide employment-based immigration sponsorship for US based positions.

If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] for roles based in the Americas or [email protected] for roles based in India.

About Cognizant:

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.