Application Security Engineer

Infosys; Hartford (CT); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid holidays

Disability insurance

Life insurance

Job summary

Infosys is seeking an Infrastructure Consultant 2 to lead and execute security‑driven infrastructure initiatives in the US. You will collaborate across client and internal teams to resolve complex incidents, perform root cause analyses, and document preventive recommendations, while supporting due diligence on infrastructure maturity and opportunities for improvement.

You will help design scalable, cost effective IT environments, coordinate releases, and ensure secure, compliant operations

Qualifications

• Threat modeling methodologies including STRIDE, PASTA, Attack trees.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices for authentication, authorization, logging/monitoring, encryption, network segmentation.
• Operating system hardening.
• Development concepts (CI/CD, Pipelines, SDLC).
• Scripting languages and Infrastructure as Code (Terraform, CloudFormation).
• Cloud Development Kit (CDK) and GitOps.
• Docker/Kubernetes/serverless/Helm understanding.
• Support or perform penetration testing.
• Design and review technical architectures.

Responsibilities

• Collaborate with teams to analyze incidents, perform root cause analyses, and document findings with preventive recommendations.
• Evaluate client IT infrastructure, produce assessment reports, and support due diligence for maturity and improvement opportunities.
• Contribute to scalable, cost-effective infrastructure designs and document deployed systems.
• Align release schedules, manage deployments, and perform post-deployment testing.
• Coordinate maintenance, emergency fixes, and upgrades ensuring seamless integration.
• Analyze performance data, coordinate insights on system behavior, and support capacity planning.
• Conduct security checks, recovery drills, and audits; implement security measures and continuity plans.
• Identify automation opportunities and propose efficiency improvements.
• Liaise with onsite, offshore, and vendor teams to document project requirements.
• Develop centralized knowledge repositories and share insights to retain expertise.

Skills

Threat Modeling

OWASP

DevOps

Scripting

Terraform

Education

Bachelor’s degree or foreign equivalent required

Tools

Docker

Kubernetes

Terraform Cloud

GitHub

CloudFormation

CDK

Job description

Overview

Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel.

In the assigned Job Role of Infrastructure Consultant 2, your Area Of Responsibility will be as below:

• Collaborate with internal and client teams to resolve complex incidents, conduct root cause analyses, and document findings with preventive recommendations
• Participate in evaluation of client IT infrastructure, prepare actionable assessment reports, and support due diligence to document infrastructure maturity and improvement opportunities
• Contribute to the design of scalable, cost-effective IT infrastructure solutions, review reusable components, and develop technical documentation for deployed systems
• Align release schedules and environment readiness, execute deployments as per protocols, perform post-deployment testing, and manage version control to track changes
• Co‑ordinate maintenance schedules, emergency fixes, and technology upgrades while ensuring uninterrupted integration into existing systems and processes
• Facilitate performance data analysis across systems, coordinate insights on system behavior, and support capacity planning to optimize performance
• Conduct security checks, recovery drills, and compliance audits, implement security measures, and coordinate continuity plans to maintain adherence to standards
• Gather feedback to identify automation opportunities, analyze existing infrastructure processes, and propose enhancements for efficiency gains
• Act as liaison with onsite, offshore, and vendor teams to document project requirements, ensuring effective collaboration
• Develop a centralized repository of technical and procedural knowledge, leveraging insights from other projects to drive efficiency and retain organizational expertise

Your Contribution To The Team

• A collaborative spirit and excellent communication skills.
• Ability to handle complex incidents and implement resolutions
• A knack for conducting IT infrastructure assessment and identifying key optimization opportunities
• Focused approach towards deployment management, system optimization, and process automation initiatives including sector specific focus
• The ability to work with cross-functional teams

Required Skill And Experience

• Threat Modeling such as: (STRIDE, PASTA, Attack trees, tooling, Att&ck) is an added advantage.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices pertaining to: authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation is required.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) is a plus.
• Cloud Development Kit (CDK), GitOps.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Design and review technical architectures.

Preferred Skill And Experience

• Experienced working in a Cyber-Security or Information Security is a bonus
• Threat Modeling using a documented process.
• Development of automation tools as required.
• Operating in a DevOps / agile team structure.
• Jira or other ticketing systems is an added advantage.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Analytical, diligence and attention to detail.
• Eagerness to research using vendor documentation.
• Create and maintain quality documentation.
• Experience of regulated environment.
• Adversary mindset.
• Work with diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Problem solver.
• Communication and collaboration skills.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks is a plus.

Additional Required Qualifications

• Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• This position may require relocation and/or travel to work/project location.
• Candidates authorized to work for any employer in the United States without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role now or in the future.

Benefits

• Medical/Dental/Vision/Life Insurance
• Long-term/Short-term Disability
• Health and Dependent Care Reimbursement Accounts
• Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)
• 401(k) plan and contributions dependent on salary level
• Paid holidays plus Paid Time Off

About Us

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

EEO

Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.