About the role
As a Vulnerability Management Cyber Security Architect, you will make an impact by participate in the planning, design and implementation of assessments. You will be a valued member of the Technology and Engineering team and work collaboratively with various stakeholders, including the most senior leadership of the company.
In this role, you will:
· Participate in the planning, design and implementation of assessments and plans
· Perform full scope adversarial simulation/red team assessments
· Work with the Blue Team in order to develop new and improved ways to defend the organization
· Prepare reports containing attack paths, findings/vulnerability information, and mitigation options and recommendations
· Present findings to various stakeholders, including the most senior leadership of the company
· Provide support during ongoing assessments by writing tools and setting up infrastructure
· Creating automation for specific tasks and operations
· Research, investigate and evaluate emerging technologies, industry trends and best practices, and vendor solutions to be able to recommend and assess various security products
· Excellent written and verbal communication skills
· Experience working in complex, diverse and global (international) environments
· Adversarial mindset and critical thinking skills
We strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a remote position open to qualified applicants in the United States. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
What you need to have to be considered
· 1 or more relevant information security certification(s) such as OSCP, OSCE, GPEN, GXPN etc.
· 6+ years total experience in information security or IT discipline
· 2+ years of hands-on work experience conducting red team operations
· 2+ years of experience with scripting, editing existing code, and general programming concepts using one or more of the following: PowerShell, JavaScript, Perl, Python, VB, bash, C/C++, C#, or Java
· Understanding of AI/ML algorithms and architectures.
· Experience Implementing cyber adversarial TTPs
· Experience in testing and assessing cloud environments
· Experience with blue team tools and methods
· Knowledge of security testing standards or frameworks, such as the MITRE ATLAS Framework
These will help you stand out
· Experience in other IT functions - system administration, software development, SOC, forensics, hunting, networking, etc.
· Experience with using, administering, and troubleshooting major operating systems (Windows, Linux/UNIX)
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Salary and Other Compensation
Applications will be accepted until September 7th, 2025.
The annual salary for this position is between $114,000 - $134,000 depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits
Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
· Medical/Dental/Vision/Life Insurance
· Paid holidays plus Paid Time Off
· 401(k) plan and contributions
· Long-term/Short-term Disability
· Paid Parental Leave
· Employee Stock Purchase Plan
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.