Senior App Security Engineer - Cloud & Threat Modeling

Infosys; Hartford (CT); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid holidays

Disability insurance

Life insurance

Job summary

Infosys is seeking an Infrastructure Consultant 2 to lead and execute security‑driven infrastructure initiatives in the US. You will collaborate across client and internal teams to resolve complex incidents, perform root cause analyses, and document preventive recommendations, while supporting due diligence on infrastructure maturity and opportunities for improvement.

You will help design scalable, cost effective IT environments, coordinate releases, and ensure secure, compliant operations

Qualifications

• Threat modeling methodologies including STRIDE, PASTA, Attack trees.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices for authentication, authorization, logging/monitoring, encryption, network segmentation.
• Operating system hardening.
• Development concepts (CI/CD, Pipelines, SDLC).
• Scripting languages and Infrastructure as Code (Terraform, CloudFormation).
• Cloud Development Kit (CDK) and GitOps.
• Docker/Kubernetes/serverless/Helm understanding.
• Support or perform penetration testing.
• Design and review technical architectures.

Responsibilities

• Collaborate with teams to analyze incidents, perform root cause analyses, and document findings with preventive recommendations.
• Evaluate client IT infrastructure, produce assessment reports, and support due diligence for maturity and improvement opportunities.
• Contribute to scalable, cost-effective infrastructure designs and document deployed systems.
• Align release schedules, manage deployments, and perform post-deployment testing.
• Coordinate maintenance, emergency fixes, and upgrades ensuring seamless integration.
• Analyze performance data, coordinate insights on system behavior, and support capacity planning.
• Conduct security checks, recovery drills, and audits; implement security measures and continuity plans.
• Identify automation opportunities and propose efficiency improvements.
• Liaise with onsite, offshore, and vendor teams to document project requirements.
• Develop centralized knowledge repositories and share insights to retain expertise.

Skills

Threat Modeling

OWASP

DevOps

Scripting

Terraform

Education

Bachelor’s degree or foreign equivalent required

Tools

Docker

Kubernetes

Terraform Cloud

GitHub

CloudFormation

CDK

Job description

Infosys is seeking an Infrastructure Consultant 2 to lead and execute security‑driven infrastructure initiatives in the US. You will collaborate across client and internal teams to resolve complex incidents, perform root cause analyses, and document preventive recommendations, while supporting due diligence on infrastructure maturity and opportunities for improvement.

You will help design scalable, cost effective IT environments, coordinate releases, and ensure secure, compliant operations