frontend developer web security

Cognizant provides IT services, IT consulting, and business consulting and services. The company focuses on analyzing and securing browser-based applications, including web extensions, through cybersecurity assessments, threat detection, and process automation.

• Analyze web extension code using static and dynamic analysis techniques to detect security violations and malicious behavior;
• Perform JavaScript reverse engineering and debugging to understand complex or obfuscated codebases;
• Identify, document, and report security vulnerabilities, including root cause analysis and recommended remediation steps;
• Support the takedown and investigation of malicious browser extensions;
• Conduct regular code reviews and provide constructive feedback aligned with secure coding best practices;
• Analyze JavaScript code to identify malicious activities and reverse engineer the code when necessary;
• Define and implement detection rules and security patterns to identify violations at scale;
• Identify emerging threat patterns and share insights to enhance team detection capabilities;
• Drive innovative ideas, recommend improvements, and help design and implement automation for existing processes;
• Act as a technical consultant, providing guidance, clarification, and technical grooming to team members;
• Collaborate with cross-functional teams and maintain clear technical documentation;
• Contribute to continuous improvement of security workflows and tooling.

• Strong hands-on experience with JavaScript, including closures, prototypes, variable scope, hoisting, callbacks, and OOP principles;
• Hands-on experience with HTML and CSS;
• Knowledge of JSON, AJAX, and ES6/ES7 standards;
• Good understanding of Node.js and Webpack;
• Experience with front-end frameworks or libraries such as React, Angular, or jQuery;
• Strong code analysis, debugging, and reverse engineering skills, particularly in JavaScript applications;
• Ability to analyze JavaScript code and identify malicious activities effectively;
• Good communication skills and ability to work as a collaborative team player;
• English required;
• Nice to have: Cybersecurity experience or strong security knowledge, familiarity with DAST and SAST methodologies, knowledge of cybersecurity open-source tools such as Burp Suite and Nmap or similar tools, understanding of obfuscation and de-obfuscation techniques, experience writing technical and security assessment reports.

• English is required;
• Based in Lisbon, Portugal;
• Hybrid work schedule.