OpenSource Security Engineer

Infosys; Hartford (CT); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Plan

Paid Holidays

Job summary

Infosys is seeking an Engineering Consultant 2 to drive engineering design, requirements elicitation, and prototype development in a collaborative environment. You will contribute to secure software supply chains, document design, and coordinate with cross-functional teams across banking, wealth management, and insurance projects.

You will implement validation activities, support interoperability, and help maintain technical documentation while applying modern security practices and OSS

Qualifications

• Bachelor's degree or foreign equivalent required from an accredited institution.
• Experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
• Hands-on with artifact signing and integrity verification technologies (Sigstore/Cosign, GPG, Notary).
• Knowledge of OSS governance policies, evaluation workflows, and automation.
• Experience implementing SLSA provenance and in-toto attestations.
• Hands-on with SBOMs using CycloneDX, SPDX, or Syft, and with AWS services.
• Strong CI/CD integration skills and scripting in Python, Bash, or Go.
• Familiarity with Maven, npm, PyPI, NuGet and OCI registries.

Responsibilities

• Elicit and document business and technical requirements, translating them into actionable specs.
• Participate in design meetings and support development of design sketches and models.
• Lead iterative engineering design cycles and coordinate feedback incorporation.
• Develop and refine solution specs and perform validation activities and simulations.
• Build prototypes and integrate testing results from cross-functional teams.
• Perform technical integration and resolve interoperability issues.
• Develop and maintain comprehensive technical documentation and share knowledge.

Skills

DevSecOps

Platform Engineering

Software Supply Chain Security

OSS Governance

Python

Bash

Go

CI/CD Automation

Intoto Attestations

AWS

NIST SSDF

Education

Bachelor's degree or equivalent

Tools

Sonatype Lifecycle

Nexus Repository

JFrog Artifactory

Sigstore Cosign

GPG Notary

CycloneDX

SPDX

Syft

Maven npm PyPI NuGet

OCI Registries

Job description

Overview

The Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel.

Overview

The Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel.

Overview

The Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel.

In the assigned Job Role of Engineering Consultant 2, your Area Of Responsibility will be as below:

• Elicit and document business and technical requirements, translating them into actionable specifications for the team
• Participate in design meetings, create initial design concepts, and support the development of design sketches and models using established engineering tools and techniques
• Participate in iterative engineering design cycles, refine prototypes, and coordinate with teams to implement feedback effectively
• Develop and refine solution specifications and perform validation activities, including simulations, to ensure that engineering solutions meet design specifications and criteria
• Build and refine prototypes, incorporating testing results and feedback received from cross-functional team, to enhance functionality
• Undertake technical integration efforts, ensure system functionality, identify and resolve interoperability issues
• Develop and maintain comprehensive technical documentation and assist in organizing knowledge-sharing sessions among team members

Your Contribution To The Team

• A collaborative spirit and excellent communication skills.
• Ability to analyze complex requirements and propose effective solutions basis engineering tools and methodologies
• Innovative mindset to address challenges and improve processes in line with industry trends
• Commitment to continuous improvement and knowledge sharing

Required Skill And Experience

• Experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
• Hands-on experience with Sonatype Lifecycle (IQ Server), Nexus Repository, or comparable solutions such as JFrog.
• Experience developing and managing Open-Source Software (OSS) governance policies, evaluation workflows, and automation.
• Knowledge of artifact signing and integrity verification technologies, including Sigstore/Cosign, GPG, and Notary.
• Experience implementing SLSA provenance, in-toto attestations, and software supply chain security controls.
• Hands-on experience generating and managing SBOMs using tools such as CycloneDX, SPDX, or Syft.
• Strong experience with AWS services, including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
• Experience integrating security and compliance controls into CI/CD pipelines.
• Proficiency in scripting and automation using Python, Bash, or Go.
• Experience designing, deploying, and supporting enterprise Open-Source platforms and repositories.
• Familiarity with OCI registries and package ecosystems such as Maven, npm, PyPI, and NuGet.
• Strong understanding of NIST SSDF, Executive Order 14028, Secure by Design principles, and modern software supply chain security practices.

Preferred Skill And Experience

• Experience securing and onboarding AI/ML open-source ecosystems.
• Enterprise Open-Source Platform Engineering experience.
• Experience developing software supply chain governance metrics, reporting, and dashboards.
• CI/CD experience with GitLab, GitHub Actions, or similar platforms.

Additional Required Qualifications

• Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• This position may require relocation and/or travel to work/project location.
• All applicants authorized to work in the United States are encouraged to apply.

Benefits

• Medical/Dental/Vision/Life Insurance
• Long-term/Short-term Disability
• Health and Dependent Care Reimbursement Accounts
• Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)
• 401(k) plan and contributions dependent on salary level
• Paid holidays plus Paid Time Off

About Us

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

EEO

Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.