Application Security Engineer

Overview In this role, you help drive reliable IT infrastructure and security for Infosys’ Financial Services unit, enabling AI-powered digital transformation for financial institutions. You will work with cross-functional teams to resolve incidents, assess infrastructure maturity, and design scalable, cost-efficient solutions. You’ll lead deployments, security checks, and automation opportunities that improve performance and resilience. This is a chance to impact banking, wealth management, and insurance projects with a security‑minded, DevOps‑driven approach. Compensation / BenefitsMedical/Dental/Vision/Life InsuranceDisability coverageReimbursement accounts401(k) planPaid holidays and PTO ResponsibilitiesResolve complex incidents with root-cause analyses and preventive recommendationsEvaluate client IT infrastructure and prepare actionable assessment reportsDesign scalable, cost-effective IT infrastructure solutions and draft technical documentationCoordinate releases, environment readiness, deployments, and post-deployment testingManage maintenance schedules, emergency fixes, and technology upgradesAnalyze performance data and support capacity planningConduct security checks, recovery drills, and compliance audits; coordinate continuity plansIdentify automation opportunities by analyzing infrastructure processesLiaise with onsite/offshore/vendor teams to document project requirementsDevelop a centralized knowledge repository leveraging project insights Key requirementsThreat modeling knowledge (STRIDE, PASTA, Attack trees) is beneficialIdentify vulnerabilities using CWE/OWASPSecurity practices: authentication, authorization, logging/monitoring, encryption, network segmentationOperating system hardeningDevelopment concepts: CI/CD, pipelines, SDLCScripting and Infrastructure as Code (Terraform, CloudFormation)Cloud development tools (CDK), GitOpsUnderstanding of docker/K8s/serverless/HelmPenetration testing experienceExperience designing/reviewing technical architecturesCollaborative mindsetExcellent communicationAnalytical and detail-orientedThreat modeling and security architectureCI/CD, pipelines, SDLCInfrastructure as Code: Terraform, CloudFormation