Senior Information Security Engineer

Infosys; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Infosys is seeking a security-focused professional to work with IT and project teams on network and cloud security requirements. The role involves coordinating with multiple teams, documenting MoMs, and guiding new joiners within the Architecture function.

Candidates should have experience with cloud security stacks, cloud deployments, and ISMS processes. The position emphasizes proactive communication, risk assessment, and knowledge of firewall, VPN, and IDS/IPS protections across on-prem and

Qualifications

• Knowledge of LAN, WAN, VPNs and security in cloud deployments.

Responsibilities

• Collaborate with IT and project teams to understand requirements and review from security standpoint.
• Coordinate and communicate proactively with relevant teams.
• Disburse MoMs and track actions to closure.
• Provide guidance to new joiners and subordinates in the team.
• Keep updated on activities within Architecture function for cross-learning.
• Evaluate outsourced/third-party technologies for security controls in cloud and on-prem environments.

Skills

Network security

Cloud security

ISMS knowledge

OS hardening

Active Directory

Firewall management

Threat analysis

Security monitoring

Education

Cyber Security Certifications

CCNA/CCNP

SANS/CISSP/CSSK

Tools

AWS

Azure

SIEM

IDS/IPS

VPN

DNS/DHCP servers

Job description

1. Work closely with the IT and project teams in getting a thorough understanding on the requirement on both network and cloud front, review from the security standpoint and recommend relevant solutions.

2. Responsible for effective coordination and prompt & proactive communication with the relevant teams involved in the requirements.

3. Disbursal of minutes of meetings (MoM) of various meetings with IT/Project teams and track action items to closure.

4. Constantly update immediate manager on progress or issues with respect to any of the requirements.

5. Contribute to the group in identifying the redundant requirements and put forward the thoughts to automate the same.

6. Evaluate outsourced/third-party technologies and hosting environments to ensure they provide adequate protection for the processing, transmission, and storage of company/clients information. 7. Responsible to provide guidance to new joiners as well as subordinates in the team.

8. Keep self-acquainted with the activities of other requirements within Architecture function so as to fill in the place in others absence and also to nurture the learning skills for professional growth.

Skills and knowledge expectations:

1. Network security:

Knowledge on Networks: LAN, WAN, SDN, NFV, Network Capacity Planning, BGP, Routing, Proxy Servers, Network Infrastructure Services (DNS, DHCP, CA, Directory Services), Load Balancing, VPN technologies and SSL certificates.

Analyze and recommend solutions for client based networking security measures.

Evaluating firewall rule base, identifying vulnerable rules or ports and providing security recommendation as per organization practices.

Knowledge of various cloud environments, cloud security stack and cloud deployment models.

Able to evaluate delivery of security offerings related to cloud security and recommend appropriate controls based on the offering.

Working experience on Amazon Web Services, Azure and other cloud service provider.

Understanding of security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring, data protection (encryption, tokenization).

3. Knowledge on Information Security Management System (ISMS) process.

4. Skillful in core area of security such as OS security, OS and DB hardening, Active Directory, IDS, IPS, Firewalls, Routers, etc.

5. Knowledge of tiered application architectures, web applications, APIs and mobile application security.

6. Should have the perspective to understand the business criticality and ability to identify & highlight risk/ gaps.

Certifications:

• Cyber Security certifications will be an added advantage.
• Certifications such as SANS, OWASP, CCSK (Cloud Security Alliance), CISSP or any other standard institutes or certification bodies.
• Network Certifications such as CCNA/CCNP.