Education :

Bachelor’s or master’s degree in computer science, information systems, cybersecurity or a related field.

Security and Technical Experience :

The security architect should have direct, documented and verifiable experience with the following:

• Experience in using architecture methodologies such as SABSA, Zachman and TOGAF
• Direct, hands-on experience managing security infrastructure such as firewalls, IPSs, WAFs, endpoint protection, SIEM and log management technology
• Verifiable experience reviewing application code for security vulnerabilities
• Direct, hands-on experience using vulnerability management tools
• Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises on new applications and services
• Full-stack knowledge of IT infrastructure:
• Applications
• Databases
• Operating systems (Windows, UNIX and Linux)
• Hypervisors
• IP networks (WAN, LAN)
• Storage networks (Fibre Channel, iSCSI and network-attached storage)
• Backup networks and media
• Direct experience designing IAM technologies and services (e.g., Active Director, LDAP, Amazon Web Services’ [AWS’] IAM)
• Strong working knowledge of IT service management (e.g., ITIL-related disciplines):
• Change management
• Configuration management
• Asset management
• Incident management
• Problem management
• Experience designing the deployment of applications and infrastructure into public cloud services (e.g., AWS or Microsoft Azure)

Industry and Regulatory Experience :

The security architect is expected to have documented experience with the following:

 Regulations, Standards and Frameworks :

• Payment Card Industry’s Data Security Standard (PCI-DSS)
• Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH)
• Validated Systems (e.g., Good Automated Manufacturing Practice [GAMP])
• Sarbanes-Oxley Act
• General Data Protection Regulation (GDPR)
• Privacy Principles (best practices)
• International Organization for Standardization (ISO) 27001/2
• National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)
• International Traffic in Arms Regulations (ITAR)

 Industry, Market or Sector Experience :

• Manufacturing
• Automotive

 Business-Related Skills :

The security architect at a midsize organization is expected to contribute his/her insights not only to colleagues within the security team and the CISO, but also to colleagues within IA, risk management and other line-of-business teams. To ensure that security-related matters are adequately conveyed, the following skills are required:

• Strategic planning skills — The security architect must interpret business, technology and threat drivers, and develop practical security roadmaps to deal with these drivers.
• Communication skills — The security architect will be required to translate complex security-related matters into business terms that are readily understood by the CISO and line-of-business colleagues. The security architect should anticipate presenting his or her analysis both in person and in written formats.
• Financial analysis — As part of the due diligence of security technologies, the security architect will be expected to evaluate the financial costs of recommended technologies. Specifically, the security architect will need to quantify purchasing and licensing options, estimate labor costs for a given service or technology, and estimate the total cost of operation or the ROI, or payback period for services or technologies that are replacing existing capabilities.
• Project management — Security services and technology implementations will require solid project management skills. The security architect will be expected to draft project plans for security service and technology deployments, and coordinate with stakeholders across the organization.

 Required Certifications :

The security architect will evidence his or her knowledge of security and risk management through ongoing continuing professional education. The ideal candidate will maintain one or more of the following certifications.

• ISC2’s CISSP, ISACA’s CISM, ISACA’s CISA, The Open Group’s TOGAF, SANS’ GAIC, IAPP’s CIPT

ROLE AND RESPONSIBILITIES :

Looking for an ASP.NET Core Developer to be responsible for product design, development, and support. The responsibilities of ASP.NET Core Developers include writing code, designing solutions for applications, and
improving functionality for a product.


To be successful as an ASP.NET Core Developer, you should demonstrate excellent problem-solving skills, high-quality coding skills, and an ability to manage your time efficiently. Developer should have superior knowledge of software development, a keen eye for detail, and be able to work independently.

Senior Developer Responsibilities:

• Creating top-quality product development.
• Collaborating with front-end developers.
• Ensuring that junior developers deliver according to coding standards and best practices.
• Learn latest language and technology. Apply learning skills on the product development.
• Using the most updated and appropriate technologies.
• Designing and building application layers.
• Think of best solutions for development and research for the product.

• Degree in Computer Science, Information Technology, or similar.
• Minimum 5+ years of experience in ASP.NET development.
• Experience in developing applications using JavaScript framework like ReactJS or Angular
• Front end development using Bootstrap, font awesome or Material framework
• Extensive working knowledge of coding using .NET languages (C# & .NET).
• Familiarity with ASP.NET framework and SQL servers.
• Working experience in Azure functions / Micro services architecture
• Strong communication skills.

• Working knowledge in SharePoint, Azure Cloud

infySEC needs 4-8 yrs candidates for its client in Noida location, currently its remote working.

Will be responsible for application pen testing using BurpSuite and tools sets provided under Kali Linux, Pen Tester should be able to test Web Based as well as thick client and be able to document findings in Pen Test Reports and knowledge of CVSS for scoring vulnerabilities.

Skills & Experience

• OSCP/CPENT certified
• Expertise in pen testing of Web Applications
• Expertise in pen testing of Thick Clients
• Dynamic Scan and Triage false positives of flags from tools
• Planning Pen Testing and coverage
• VAPT report writing
• Manual Pen testing using Postman/Extensions and etc
• Expertise on Security Tools: 
• Burp Suite Professional or Enterprise
• Kali Linux and tools available in Kali Linux such NMAP, SQLMAP and etc

• Pentesting
• Kali Linux
• Burpsuit proxy tool
• sqlmap

• Establish the networking environment by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards
• design and implement new solutions and improve the resilience of the current environment
• maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, and collaborating with network architects on network optimization
• undertake data network fault investigations in local and wide-area environments using information from multiple sources
• secure network systems by establishing and enforcing policies, and defining and monitoring access
• support and administer firewall environments in line with IT security policy
• report network operational status by gathering and prioritising information and managing projects
• upgrade data network equipment to the latest stable firmware releases
• configure routing and switching equipment, hosted IP voice services and firewalls
• provide remote support to on-site engineers and end users/customers during installation
• provide remote troubleshooting and fault finding if issues occur upon initial installation
• undertake capacity management and audit of IP addressing and hosted devices within data centers
• liaise with project management teams, third-line engineers, and service desk engineers on a regular basis
• speak to customers via email and phone for initial requirement capture.
• Must have hands-on experience on Azure & Active directory.