Analyst - Information Security
CHENNAI, Infosys Limited · Chennai, Tamil Nadu
Not Disclosed
Job Description
## Educational Qualification
* Bachelor of Technology (B.Tech)
* Bachelor of Computer Applications (BCA)
## Service Line
**Information Security Group**
## Key Responsibilities
* Conduct application security assessments, vulnerability assessments, and penetration testing for web applications and enterprise platforms.
* Identify security vulnerabilities in web applications, APIs, and web services, and provide practical remediation recommendations.
* Perform **Dynamic Application Security Testing (DAST)** to detect runtime security issues and validate application security controls.
* Collaborate with development and DevOps teams to integrate security practices throughout the software development lifecycle (DevSecOps).
* Evaluate the severity and exploitability of identified vulnerabilities and recommend risk-based mitigation strategies.
* Assess REST APIs and web services to identify authentication, authorization, and data exposure issues.
* Prepare detailed security assessment reports, including findings, risk ratings, proof of concept, and remediation guidance.
* Present application security risks and recommendations to technical teams and management.
* Stay informed about emerging cybersecurity threats, attack techniques, and security best practices.
## Technical & Professional Requirements
* Good understanding of web application security concepts and common attack vectors.
* Hands-on experience with security testing tools such as **Burp Suite**, **Nmap**, **OWASP ZAP**, and similar vulnerability assessment tools.
* Knowledge of **Static Application Security Testing (SAST)** and **Dynamic Application Security Testing (DAST)** methodologies and automated scanning tools.
* Familiarity with **OWASP Top 10**, secure coding practices, and application security standards.
* Understanding of **DevSecOps** principles and integrating security into CI/CD pipelines.
* Knowledge of Windows operating systems, modern web browsers, and HTTP/HTTPS protocols.
* Ability to analyze security findings, validate vulnerabilities, and recommend effective remediation measures.
* Strong analytical, documentation, communication, and problem-solving skills.
## Preferred Skills
* Application Security
* Web Application Penetration Testing
* API Security Testing
* DevSecOps
* Burp Suite
* OWASP ZAP
* Nmap
* SAST
* DAST
* OWASP Top 10
* Vulnerability Assessment
* Secure Coding Practices
* Bachelor of Technology (B.Tech)
* Bachelor of Computer Applications (BCA)
## Service Line
**Information Security Group**
## Key Responsibilities
* Conduct application security assessments, vulnerability assessments, and penetration testing for web applications and enterprise platforms.
* Identify security vulnerabilities in web applications, APIs, and web services, and provide practical remediation recommendations.
* Perform **Dynamic Application Security Testing (DAST)** to detect runtime security issues and validate application security controls.
* Collaborate with development and DevOps teams to integrate security practices throughout the software development lifecycle (DevSecOps).
* Evaluate the severity and exploitability of identified vulnerabilities and recommend risk-based mitigation strategies.
* Assess REST APIs and web services to identify authentication, authorization, and data exposure issues.
* Prepare detailed security assessment reports, including findings, risk ratings, proof of concept, and remediation guidance.
* Present application security risks and recommendations to technical teams and management.
* Stay informed about emerging cybersecurity threats, attack techniques, and security best practices.
## Technical & Professional Requirements
* Good understanding of web application security concepts and common attack vectors.
* Hands-on experience with security testing tools such as **Burp Suite**, **Nmap**, **OWASP ZAP**, and similar vulnerability assessment tools.
* Knowledge of **Static Application Security Testing (SAST)** and **Dynamic Application Security Testing (DAST)** methodologies and automated scanning tools.
* Familiarity with **OWASP Top 10**, secure coding practices, and application security standards.
* Understanding of **DevSecOps** principles and integrating security into CI/CD pipelines.
* Knowledge of Windows operating systems, modern web browsers, and HTTP/HTTPS protocols.
* Ability to analyze security findings, validate vulnerabilities, and recommend effective remediation measures.
* Strong analytical, documentation, communication, and problem-solving skills.
## Preferred Skills
* Application Security
* Web Application Penetration Testing
* API Security Testing
* DevSecOps
* Burp Suite
* OWASP ZAP
* Nmap
* SAST
* DAST
* OWASP Top 10
* Vulnerability Assessment
* Secure Coding Practices