Analyst - Information Security

Infosys; Chennai District; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Infosys in Chennai is seeking a skilled Information Security professional to perform security assessments, vulnerability testing and penetration testing on critical web applications. You will collaborate with DevOps teams to enable DevSecOps and shift-left security, and you will conduct DAST assessments, analyze issues and guide remediation strategies.

The role requires hands-on experience with security tools (Burp Suite, Nmap, ZAP) and knowledge of SAST/DAST scanners, with a focus on secure

Qualifications

• Security assessment, vulnerability assessment and penetration testing of web apps.
• Collaborate with DevOps teams to enable DevSecOps and shift-left.
• Perform DAST and analyze vulnerabilities to guide remediation.

Responsibilities

• Perform security assessment, vulnerability assessments and penetration tests on a wide variety of high critical web applications.
• Work closely with Devops teams of the platforms to enable DevSecOps and shift-left.
• Perform DAST, analyze security issues and suggest remediations.
• Perform web services and API security assessment.
• Analyze vulnerabilities and their exploitability to guide product teams to implement appropriate remediation.
• Report to leadership teams to provide visibility of application security risk for products and platforms.

Skills

Burp Suite

Nmap

ZAP

DevSecOps

Education

Bachelor of Technology

Bachelor of Computer Applications

Tools

DAST tools

SAST tooling

Job description

Educational Requirements

• Bachelor Of Technology
• Bachelor Of Comp. Applications

Service Line

• Information Security Group

Responsibilities

• Perform security assessment, vulnerability assessments and penetration tests on a wide variety of high critical web applications.
• Work closely with Devops teams of the platforms to enable DevSecOps and shift-left.
• Perform DAST, analyze security issues and suggest remediations.
• Perform web services and API security assessment.
• Analyze vulnerabilities and their exploitability to guide product teams to put right level of remediation in place.
• Report to leadership teams to provide right visibility of the application security risk for a given product / platform.

Technical and Professional Requirements

• Knowledge of Windows and various browsers.
• Knowledge of security tools like Burp suite, Nmap, ZAP, etc.
• Knowledge of any of the automated scanners for SAST and DAST.
• Dev Sec Ops knowledge

Preferred Skills

• Technology->Application Security->Application Security - ALL