Description

About Infosys:
Infosys is a global leader in next-generation digital services and consulting. We enable clients in 56+ countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

Short Description:
If your passion is to build solutions that really make a difference to enterprises, the community and your world, Infosys is the right place for you.

Roles and Responsibilities:
Monitoring & Response:

• • Security incident monitoring and response using SIEM tools like ELK and any other industry standard tool
  • Co-ordinate with other stakeholders as required and for additional information on incidents.
  • Perform triage, classification, investigation of security alerts raised on Centralized SIEM as identified by Client.
  • Investigate, log and evidence collection and analysis and escalation of true positives.
  • Closure of false positives after initial analysis, correlate relevant security events and respond to events with predefined procedures.
  • In case of user impact due to security issue, team need to coordinate with respective end users and make sure the issue is fixed and user is back up and running as expected.

Containment of Threat:

• • Provide 'containment, eradication, remediation' recommendations to respective resolver teams as per defined process.
  • Co-ordinate with respective resolver groups to contain the threat from client's environment.
  • Follow up until the closure of incident or an event.
  • Collect data and context on threats for security incident escalation to SOC L2
  • Co-ordinate with infrastructure, network and application team during investigation and help/guide respective resolver teams to resolve the security incidents.
  • Creating standardized work instructions/templates for any new category of work
  • Review and update SOPs as per the learning and changes to process and the environment.
  • Eliminate false positives and escalate incidents to SOC engineering team as required.
  • Prepare RCA documents for any P1 issues within the scope.
  • Daily, Weekly, Monthly incident status reporting
  • Maintain and improve the SOC L1, L2 daily operation procedures, in consultation with L3/engineering team.
  • Submit, coordinate and track security incidents and tickets with third-party security partners.

At Infosys, we recognize that everyone has individual requirements. If you are a person with disability, illness, or injury and require adjustments to the recruitment and selection process, please contact our Recruitment team for adjustment either via the following email [email protected] or call 1-866-472-0935. Alternatively, you can include your preferred method of communication in email, and someone will be in touch.

Please note in order to protect the interest of all parties involved in the recruitment process, Infosys does not accept any unsolicited resumes from third-party vendors. In the absence of a signed agreement, any submission will be deemed as non-binding and Infosys explicitly reserves the right to pursue and hire the submitted profile. All recruitment activity must be coordinated through the Talent Acquisition department.

"All aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer."