Senior Information Security Engineer

Job Overview:

• ISG is a prominent Security division dedicated to safeguarding the internal security of Infosys while ensuring compliance with client security requirements as outlined in contractual agreements.
• The team operates across multiple locations and is structured into three groups encompassing ten distinct functions.

Core Responsibilities:

• Regularly inform the immediate supervisor about progress or challenges related to any assigned tasks.
• Assist the team in identifying redundant requirements and propose ideas for automation.
• Assess third-party technologies and hosting environments to verify they offer sufficient protection for the processing, transmission, and storage of client information.
• Provide mentorship to new hires and support team members.
• Stay informed about the activities of other teams within the Architecture function to cover for colleagues during their absence and to enhance personal professional development.

Technical Qualifications:

• Proficiency in network security.
• Understanding of LAN, WAN, SDN, NFV, network capacity planning, and BGP routing.
• Familiarity with proxy servers, network infrastructure services, DNS, DHCP, CA directory services, load balancing, VPN technologies, and SSL certificates.
• Analyze and propose solutions for client networking security measures.
• Review firewall rule sets, identify vulnerable rules or ports, and recommend security practices in line with organizational standards.
• Cloud security expertise.
• Knowledge of various cloud environments, security stacks, and deployment models.
• Ability to evaluate and recommend appropriate security controls based on cloud service offerings.
• Hands-on experience with Amazon Web Services, Azure, and other cloud providers.
• Understanding of security solutions across various domains in cloud environments, including identity and access management, security monitoring, data protection, encryption, and tokenization.

Additional Qualifications:

• Possession of cyber security certifications is a plus.
• Certifications such as SANS, OWASP, CCSK, Cloud Security Alliance, CISSP, or others from recognized institutions or certifying bodies.
• Network certifications such as CCNA or CCNP are advantageous.

Preferred Expertise:

Domain->Infrastructure-Information Security Management->Information Security Compliance