Senior Application Security Engineer

Cognizant

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
Philadelphia, PA
Salary
$90,000–$130,000 / yr
Posted
9 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $182k
This role $110k
$74k most similar roles pay here $235k

This role pays less than 97% of similar roles. Most pay $151,475–$212,625 — the shaded band above. At the midpoint, this role pays about $110k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Cognizant

Cognizant is a multinational IT services and consulting company offering digital transformation, technology, and business process services. It serves clients across financial services, healthcare, manufacturing, and other industries worldwide.

Cognizant currently has 37 open roles on FindRole.

Listed pay typically runs $124,500–$151,250 across 28 roles with salary data.

Most-posted roles

View all roles at Cognizant

At a glance

TL;DR · Senior Application Security Engineer

Senior Application Security Engineer (Black Duck / SCA) - Onsite is a senior role within the IoT Practice focused on product security and software composition analysis. The engineer will administer, configure, and optimize Black Duck for open-source governance while developing integrations using Black Duck APIs to automate security workflows. Working closely with R&D and development teams, the individual will identify, assess, and remediate security risks throughout the software development lifecycle. Key responsibilities include conducting security assessments, performing threat modeling, and providing expertise in memory leak testing, mobile application security, cryptographic agility, and vulnerability remediation. The role requires proficiency in SCA, DevSecOps, CI/CD pipelines, and CVE analysis. Technical focus areas include SBOM, supply chain security, and cloud environments like AWS, Azure, or GCP to ensure secure product releases and robust software architecture.

What you'll do

  • Administer, configure, and optimize Black Duck for software composition analysis and open-source governance.
  • Develop and maintain automated security workflows using Black Duck APIs.
  • Partner with R&D teams to embed security best practices throughout the software development lifecycle.
  • Analyze security vulnerabilities and provide specific remediation strategies for product releases.
  • Conduct security assessments, risk evaluations, and secure design reviews for products.
  • Provide technical expertise in memory testing, mobile security, and cryptographic agility.
  • Integrate security tools and automated checks into CI/CD pipelines.
  • Drive continuous improvement of product security processes, tools, and governance.

What we're looking for

  • At least 8 years of experience in Cybersecurity, Product Security, or Application Security.
  • Strong hands-on experience with Black Duck and Software Composition Analysis (SCA).
  • Experience working with Black Duck APIs and security tool integrations.
  • Deep understanding of secure software development and product security principles.
  • Knowledge of vulnerability management, CVE analysis, and remediation practices.
  • Experience with DevSecOps and integrating security into CI/CD pipelines.
  • Strong communication and stakeholder management skills.
  • Relevant security certifications such as CISSP, CSSLP, GWAPT, GSEC, or equivalent are preferred.

More like this

Similar roles

Senior Security Engineer

Oracle

Reston, VA +2 51 days ago $82,200$187,000
Encryption Hashing Masking Access Management Security Monitoring Data Security Disaster Recovery
3+ yrs exp

Senior Security Engineer

Chime

New York, NY +1 101 days ago
Python Go Ruby AWS GCP Terraform infrastructure-as-code API Mobile Security Penetration Testing Threat Modeling SDLC GRC AI Automation
2+ yrs exp Hybrid

Senior Application Security Engineer

AbbVie

Chicago, IL 41 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation OWASP Top 10 CWE CSPM Snyk Endor Labs
7+ yrs exp

Senior Application Security Engineer

AbbVie

Irvine, CA 41 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation CSPM Snyk Endor Labs OWASP Top 10 CWE
7+ yrs exp

Senior Application Security Engineer

Upstart

Remote (Canada) 6 days ago $166,900$230,900
Application Security Threat Modeling SAST DAST SCA CI/CD Python Java Go Ruby API Security Microservices GraphQL REST GenAI Secrets Management Cloud-Native AWS CISSP CSSLP CCSP
5+ yrs exp Remote