Cyber Security Consultant

Infosys Limited; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Infosys Limited in Bangalore is seeking a Cyber Security Consultant to execute and support vulnerability assessments across applications, including SAST, DAST, SCA, and manual code review, ensuring findings are accurate and actionable.

You will validate scanner results, manage remediation, and contribute to CI/CD security integration, dashboards, and risk-based prioritization, with emphasis on secure design and incident response.

Qualifications

• Bachelor's degree in information technology or cyber security.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of OWASP Top 10 and secure architecture principles.
• Proficiency with Burp Suite for manual testing and validation of findings.

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review).
• Validate scanner results and perform false-positive analysis with remediation tracking.
• Prioritize vulnerabilities based on business impact and CVSS scoring.
• Develop dashboards and reports tracking vulnerability metrics and remediation trends.
• Support CI/CD pipelines integration for security scanning and vulnerability workflows.
• Provide actionable remediation recommendations and coordinate root-cause analysis.
• Support threat modeling and application risk assessments.

Skills

Vulnerability assessment

Threat modeling

CI/CD integration

Documentation & stakeholder engagement

Education

Bachelor's degree in information technology or cyber security

Tools

Burp Suite

Fortify

Checkmarx

SonarQube

Black Duck

Tenable

Nmap

Azure DevOps

Power BI

Job description

BANGALORE, Infosys Limited Cyber Security Consultant

Job ID/Reference Code INFSYS-INDEED1-251784

Work Experience 3 - 10 Years

Job Title Cyber Security Consultant

Educational Requirements

Bachelor of Engineering

Service Line

Infosys Quality Engineering

Responsibilities

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high-severity or zero-day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Additional Responsibilities

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Technical and Professional Requirements

• Bachelor's degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business-logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Preferred Skills

• Technology->Application Security->Application Risk Profiling Threat Modeling Technology->Application Security->Application Security - ALL Technology->Application Security->Vulnerability Management Technology->Mobile Testing->Mobile Security Testing->Burp Suite Technology->Security Testing->SAST