Open Source Security Engineer — DevSecOps & SBOM Focus

Infosys; Hartford (CT); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Plan

Paid Holidays

Job summary

Infosys is seeking an Engineering Consultant 2 to drive engineering design, requirements elicitation, and prototype development in a collaborative environment. You will contribute to secure software supply chains, document design, and coordinate with cross-functional teams across banking, wealth management, and insurance projects.

You will implement validation activities, support interoperability, and help maintain technical documentation while applying modern security practices and OSS

Qualifications

• Bachelor's degree or foreign equivalent required from an accredited institution.
• Experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
• Hands-on with artifact signing and integrity verification technologies (Sigstore/Cosign, GPG, Notary).
• Knowledge of OSS governance policies, evaluation workflows, and automation.
• Experience implementing SLSA provenance and in-toto attestations.
• Hands-on with SBOMs using CycloneDX, SPDX, or Syft, and with AWS services.
• Strong CI/CD integration skills and scripting in Python, Bash, or Go.
• Familiarity with Maven, npm, PyPI, NuGet and OCI registries.

Responsibilities

• Elicit and document business and technical requirements, translating them into actionable specs.
• Participate in design meetings and support development of design sketches and models.
• Lead iterative engineering design cycles and coordinate feedback incorporation.
• Develop and refine solution specs and perform validation activities and simulations.
• Build prototypes and integrate testing results from cross-functional teams.
• Perform technical integration and resolve interoperability issues.
• Develop and maintain comprehensive technical documentation and share knowledge.

Skills

DevSecOps

Platform Engineering

Software Supply Chain Security

OSS Governance

Python

Bash

Go

CI/CD Automation

Intoto Attestations

AWS

NIST SSDF

Education

Bachelor's degree or equivalent

Tools

Sonatype Lifecycle

Nexus Repository

JFrog Artifactory

Sigstore Cosign

GPG Notary

CycloneDX

SPDX

Syft

Maven npm PyPI NuGet

OCI Registries

Job description

Infosys is seeking an Engineering Consultant 2 to drive engineering design, requirements elicitation, and prototype development in a collaborative environment. You will contribute to secure software supply chains, document design, and coordinate with cross-functional teams across banking, wealth management, and insurance projects.

You will implement validation activities, support interoperability, and help maintain technical documentation while applying modern security practices and OSS