{"id":1223509,"url":"https://alion.io/job/infosys-cyber-security-consultant","title":"Cyber Security Consultant","company":{"id":223,"name":"Infosys","domain":"infosys.com","url":"https://alion.io/company/infosys","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"A","score":95,"open_postings":249,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":93,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":43000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"Fortify","optional":false},{"name":"Java","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Power BI","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-28T09:37:05Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-14T01:26:23Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":45},"description":"We are seeking a mid-level engineer to identify, manage, and remediate application vulnerabilities throughout the software development lifecycle. This role plays a key part in maintaining our security posture across web, mobile, and cloud-based applications. Ideal candidates will have deep technical curiosity and practical experience with vulnerability scanning, security assessments, prioritization, and coordination of remediation efforts.\nResponsibilities\nResponsibilities\nExecute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.\nValidate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.\nManage multiple application security initiatives concurrently while meeting strict timelines in a fast paced environment.\nPrioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).\nDevelop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).\nSupport the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.\nFacilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.\nSupport threat modeling and application risk assessments, with a focus on discovering insecure design patterns.\nParticipate in high-severity or zero-day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.\nProvide input into policies and standards related to application and cloud security controls.\nTechnical requirements\nBachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline-or equivalent professional experience.\n5-7 years of relevant experience in application security and/or vulnerability management.\nSolid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.\nProficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business-logic vulnerabilities.\nHands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).\nFamiliarity with NIST, MITRE ATT&CK, and CIS benchmarks.\nProgramming/scripting proficiency in languages such as Python, Java, .NET, or similar.\nExcellent documentation, communication, and stakeholder engagement skills.\nAdditional responsibilities\nProfessional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).\nExperience using the ServiceNow platform for vulnerability or incident tracking.\nProficiency in Azure cloud and Azure DevOps environments.\nExperience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.\nPreferred skills\nTechnology->Application Security->Application Security - ALL,Technology->Mobile Testing->Mobile Security Testing->Burp Suite,Technology->Security Testing->SAST,Technology->Application Security->Vulnerability Management,Technology->Application Security->Application Risk Profiling, Threat Modeling\nEducation\nBachelor of Engineering","description_format":"text","description_chars":3547,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-09-25T13:02:38Z"}],"visa":[],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.851,"p_room":0.72,"age_days":45,"expected_fill_days":93,"reasons":["conf:2","velocity","win:mid","crowd:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/infosys-cyber-security-consultant","json_url":"https://alion.io/job/infosys-cyber-security-consultant.json","meta":{"generated_at":"2026-10-14T02:12:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3291,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":223},"rest":"https://alion.io/mcp/rest/get_company?id=223"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfosys-cyber-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfosys-cyber-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfosys-cyber-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infosys-cyber-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfosys-cyber-security-consultant"}]}