Information Security Analyst

Infosys; Chennai; On-site; INR 800,000 - 1,600,000; Full time

Job summary

Infosys is seeking an Analyst - Information Security in Chennai to work on secure application architectures, encryption technologies, and cloud security. The role requires understanding OWASP Top 10 vulnerabilities, ASVS, and IAM principles.

You will collaborate with IT and project teams to assess security requirements and implement appropriate controls. The analyst will evaluate outsourced technologies and hosting environments to ensure the protection of company and client information across

Qualifications

• Knowledge of secure application architectures and encryption technologies.
• Understanding of OWASP Top 10 vulnerabilities and ASVS.
• Experience with cloud environments and cloud security stacks.
• Ability to evaluate and propose security controls for cloud offerings.

Responsibilities

• Collaborate with IT and project teams to understand security requirements and propose solutions.
• Coordinate effectively and communicate proactively with relevant teams.
• Identify redundant requirements and suggest automation opportunities.
• Evaluate third-party technologies and hosting to ensure protection of data.

Skills

Secure architectures

Cryptography & key mgmt

Authn & access control

OWASP Top 10

AppSec standards (ASVS)

Identity & access management

Cloud security concepts

Job description

Analyst - Information Security

• Working knowledge of secure application architectures, encryption technologies, cryptography and key management, authentication, and access control mechanisms.
• Knowledge of the common application layer vulnerabilities and the ability to articulate the risks to project teams.
• Knowledge of tiered application architectures, web applications, APIs, mobile application security and data integration techniques.
• Should have good understanding of OWASP Top 10 vulnerabilities and Application Security Verification Standard.
• Knowledge on identity and access management process & principles and its related technologies.
• Knowledge of various cloud environments, cloud security stack and cloud deployment models (Saas, PaaS and IaaS).
• Able to evaluate delivery of security offerings related to cloud security and recommend appropriate controls based on the offering.
• Working experience on Amazon Web Services, Azure, or any other cloud service provider(s).
• Understanding of services and security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring and data protection.

Responsibilities

1. Work closely with the IT and project teams in getting a thorough understanding on the requirement on both network and cloud front, review from the security standpoint and recommend relevant solutions.
2. Responsible for effective coordination and prompt & proactive communication with the relevant teams involved in the requirements.
3. Contribute to the group in identifying the redundant requirements and put forward the thoughts to automate the same.
4. Evaluate outsourced/third-party technologies and hosting environments to ensure they provide adequate protection for the processing, transmission, and storage of company/clients information.