Security Testing

at  Infosys

Today, the corporate landscape is dynamic, and the world ahead is full of possibilities! None of the amazing things we do at Infosys would be possible without an equally amazing culture, the environment where ideas can flourish and where you are empowered to move forward as far as your ideas will take you.
At Infosys, we assure that your career will never stand still, we will inspire you to build what’s next and we will navigate further together. Our journey of learnability, values and trusted relationships with our clients continue to be the cornerstones of our organization and these values are upheld only because of our people.

SECURITY TESTING ANALYSTMust have skills

• Hands-on knowledge of Security testing methodologies like OWASP Top 10, SANS 25 etc.,
• Ability to perform automated and manual hands-on penetration security testing e.g. DAST, SAST and SCA, identifying security risks within applications, cloud infrastructure, security controls and Network systems.
• Experience with penetration testing tools (e.g. Burp)
• Extensive knowledge of attack payloads for discovering security vulnerabilities
• Plan, execute, and report on all testing activities and outcomes
• Create findings reports and communicate to stakeholders
• Must possess at least 5 years of experience in delivering VAPT in Web(Thin and Thick Client), Mobile and APIs
• Should have good and effective communication skills in English. (Oral and written)

Good to have skills

• The successful candidate must be highly motivated, fast learner, flexible, willing to assume responsibility and deliver quality work on time
• Constantly identify opportunities for enhancing productivity using automation and process improvements.
• Exposure to scripting languages(e.g. Shell)
• Knowledge on DevSecOps

Specific tools required

• Burpsuite, WebInspect, Fortify, Zap, Checkmarx

Certifications

• CEH(Mandatory), OSCP, CCSP

Please refer the Job description for details