OpenSource Security Engineer

Overview As Engineering Consultant 2, you will help drive secure, scalable engineering solutions for Infosys Financial Services. You’ll translate business needs into technical specifications, contribute to design cycles, verify prototypes, and ensure integration and documentation across cross-functional teams. You’ll work with open-source governance and software supply chain security practices to build trusted, compliant solutions. This role offers exposure to cutting-edge AI-enabled projects and a path to impact across banking, wealth management, and insurance domains. Compensation / BenefitsMedical/Dental/Vision/Life InsuranceLong-term/Short-term DisabilityHealth and Dependent Care Reimbursement AccountsInsurance (Accident, Critical Illness, Hospital Indemnity, Legal)401(k) plan and contributionsPaid holidays plus Paid Time Off ResponsibilitiesElicit and document business and technical requirements and translate into actionable specsParticipate in design meetings and support design sketches with established toolsEngage in iterative design cycles, refine prototypes, and implement feedbackDevelop and validate solution specifications, including simulationsBuild and refine prototypes, incorporate testing feedback to enhance functionalityUndertake technical integration, ensure interoperability, and resolve issuesDevelop and maintain technical documentation and support knowledge-sharing sessions Key requirementsExperience in DevSecOps, Platform Engineering, or Software Supply Chain SecurityHands-on with Sonatype Lifecycle (IQ Server), Nexus Repository, or JFrogExperience developing and managing OSS governance policies and automationArtifact signing and integrity verification: Sigstore/Cosign, GPG, NotaryExperience implementing SLSA provenance and in-toto attestationsExperience generating/managing SBOMs with CycloneDX, SPDX, or SyftStrong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch)CI/CD integration of security-controls; scripting in Python, Bash, or GoDesigning, deploying, and supporting enterprise Open-Source platforms and repositoriesFamiliarity with OCI registries and ecosystems (Maven, npm, PyPI, NuGet)Understanding of NIST SSDF, Secure by Design, and modern software supply chain security practicesCollaborative mindset and strong communicationAnalytical ability to translate complex requirements into solutionsInnovative and proactive problem-solvingSonatype Lifecycle (IQ Server)Nexus RepositoryJFrog