Senior Information Security Engineer

• ISG is a large Security group focused on internal Security of Infosys and in turn providing the required
• assurance to Clients on meeting their Security demands as per contractual agreements. The team is
• dispersed across locations and is divided into 3 Groups consisting of 10 Functions.

Roles & Responsibilities

• 1. Constantly update immediate manager on progress or issues with respect to any of the
• requirements.
• 2. Contribute to the group in identifying the redundant requirements and put forward the thoughts
• to automate the same.
• 3. Evaluate outsourced/third-party technologies and hosting environments to ensure they provide
• adequate protection for the processing, transmission, and storage of company/clients
• information.
• 4. Responsible to provide guidance to new joiners as well as subordinates in the team.
• 5. Keep self-acquainted with the activities of other requirements within Architecture function so as
• to fill in the place in others absence and also to nurture the learning skills for professional
• growth.

Technical Requirements

• 1. Network security:
•  Knowledge on Networks: LAN, WAN, SDN, NFV, Network Capacity Planning, BGP, Routing,
• Proxy Servers, Network Infrastructure Services (DNS, DHCP, CA, Directory Services), Load
• Balancing, VPN technologies and SSL certificates.
•  Analyze and recommend solutions for client based networking security measures.
•  Evaluating firewall rule base, identifying vulnerable rules or ports and providing security
• recommendation as per organization practices.
• 2. Cloud Security
•  Knowledge of various cloud environments, cloud security stack and cloud deployment
• models.
•  Able to evaluate delivery of security offerings related to cloud security and
• recommend appropriate controls based on the offering.
•  Working experience on Amazon Web Services, Azure and other cloud service provider.
•  Understanding of security solutions in cloud environments across various security domains
• like Identity & Access Management, Security Monitoring, data protection (encryption,
• tokenization).

Additional

• Cyber Security certifications will be an added advantage.
•  Certifications such as SANS, OWASP, CCSK (Cloud Security Alliance), CISSP or any other
• standard institutes or certification bodies.
•  Network Certifications such as CCNA/CCNP.