DevSecOps Application Security Engineer

OVERVIEW

The Infosys Retail, Consumer Goods, and Logistics unit stands as a globally

respected partner of choice, dedicated to helping clients achieve their business

goals through cutting-edge technology and seamless services. Our unit offers a

dynamic forum where projects and teams can effectively learn, adopt, and excel

in all technologies. We foster a vibrant community that leverages shared skills

and experiences to deliver high-quality, value-enhanced solutions. Join us and

become part of a team that drives innovation, operational efficiency, and

sustainable growth in the retail, consumer goods, and logistics sector.

Together, we can shape the future of these industries and achieve remarkable

success.

JOB DESCRIPTION

In the assigned Job Role of Infrastructure Consultant 2, your Area Of

Responsibility will be as below:

⦁ Collaborate with internal and client teams to resolve complex incidents,

conduct root cause analyses, and document findings with preventive

recommendations

⦁ Participate in evaluation of client IT infrastructure, prepare actionable

assessment reports, and support due diligence to document infrastructure

maturity and improvement opportunities

⦁ Contribute to the design of scalable, cost-effective IT infrastructure

solutions, review reusable components, and develop technical documentation for

deployed systems

⦁ Align release schedules and environment readiness, execute deployments as per

protocols, perform post-deployment testing, and manage version control to track

changes

⦁ Co-ordinate maintenance schedules, emergency fixes, and technology upgrades

while ensuring uninterrupted integration into existing systems and processes

⦁ Facilitate performance data analysis across systems, coordinate insights on

system behavior, and support capacity planning to optimize performance

⦁ Conduct security checks, recovery drills, and compliance audits, implement

security measures, and coordinate continuity plans to maintain adherence to

standards

⦁ Gather feedback to identify automation opportunities, analyze existing

infrastructure processes, and propose enhancements for efficiency gains

⦁ Act as liaison with onsite, offshore, and vendor teams to document project

requirements, ensuring effective collaboration

⦁ Develop a centralized repository of technical and procedural knowledge,

leveraging insights from other projects to drive efficiency and retain

organizational expertise

Your contribution to the team:

⦁ A collaborative spirit and excellent communication skills.

⦁ Ability to handle complex incidents and implement resolutions

⦁ A knack for conducting IT infrastructure assessment and identifying key

optimization opportunities

⦁ Focused approach towards deployment management, system optimization, and

process automation initiatives including sector specific focus

⦁ The ability to work with cross-functional teams

REQUIRED SKILL AND EXPERIENCE

• Application Security Testing: Conduct SAST/SCA using GHAS and DAST using Burp

Suite; validate and classify vulnerabilities aligned with OWASP.

• DevSecOps & Integration: Integrate GHAS into CI/CD, automate scans across

SDLC, configure policies, reduce false positives, and enable shift-left security

with development teams.

• Vulnerability Management: Analyze findings, provide remediation guidance,

track vulnerabilities through lifecycle, and support risk-based prioritization.

• Reporting & Stakeholder Management: Prepare technical and executive reports,

communicate findings with stakeholders, and support audits, compliance, and

AppSec initiatives.

PREFERRED SKILL AND EXPERIENCE

• Security Advisory & Review: Conduct secure code reviews and architecture level

assessments; Coordinate with development teams on secure coding and mitigation

strategies.

• Knowledge Of: SDLC and DevSecOps practices, microservices/API/cloud security,

strong analytical/problem-solving skills, and stakeholder

communication/consulting experience.

Good to Have:

• Exposure to SAST (Fortify, SonarQube), DAST (Netsparker, Fortify on Demand),

and SCA (BlackDuck, Dependabot) tools

• Certifications: CEH, OSCP, GWAPT, CSSLP, CISSP

• Experience in threat modeling and architecture reviews

ADDITIONAL REQUIRED QUALIFICATIONS

• Bachelor’s degree or foreign equivalent required from an accredited

institution. Will also consider three years of progressive experience in the

specialty in lieu of every year of education.

• This position may require relocation and/or travel to work/project location.

• All applicants authorized to work in the United States are encouraged to

apply.

EEO/ABOUT US

Benefits

Along with competitive pay, as a full-time Infosys employee you are also

eligible for the following benefits:

* Medical/Dental/Vision/Life Insurance

* Long-term/Short-term Disability

* Health and Dependent Care Reimbursement Accounts

* Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)

* 401(k) plan and contributions dependent on salary level

* Paid holidays plus Paid Time Off

About Us

Infosys is a global leader in next-generation digital services and consulting.

We enable clients in more than 50 countries to navigate their digital

transformation. With over four decades of experience in managing the systems and

workings of global enterprises, we expertly steer our clients through their

digital journey. We do it by enabling the enterprise with an AI-powered core

that helps prioritize the execution of change. We also empower the business with

agile digital at scale to deliver unprecedented levels of performance and

customer delight. Our always-on learning agenda drives their continuous

improvement through building and transferring digital skills, expertise, and

ideas from our innovation ecosystem.

EEO

Infosys provides equal employment opportunities to applicants and employees

without regard to race; color; sex; gender identity; sexual orientation;

religious practices and observances; national origin; pregnancy, childbirth, or

related medical conditions; status as a protected veteran or spouse/family

member of a protected veteran; or disability.