Security Operations Center Engineer

Overview:

The Infosys Insurance unit is dedicated to transforming the insurance industry through innovative digital solutions powered by advanced AI technologies. We blend our industry-leading expertise in consulting and technology to help clients solve complex business problems and unveil hidden value. By integrating AI-driven insights, we enhance our ability to link strategy to execution, leverage cross-industry experience, and accelerate speed to market, ensuring we stay ahead of technological advancements and deliver the best to our clients. Join us to be part of a dynamic team that drives innovation, operational efficiency, and sustainable growth in the insurance sector. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects that shape the future of insurance.

Area of Responsibility:

• Contribute to requirements elicitation by documenting assigned business requirements.
• Facilitate software application design discussions and document design decisions.
• Participate in coding and integrate features or updates into existing applications.
• Conduct code reviews, modify the codebase, and maintain code repositories.
• Implement test strategies, analyze results, and coordinate bug fixes.
• Develop user training programs, documentation, and support frameworks.
• Resolve production issues and recommend preventive strategies.
• Maintain records of code, testing techniques, and support activities.

Your Contribution to the Team:

• Demonstrate a collaborative spirit and excellent communication skills.
• Handle end-to-end SDLC phases from requirements gathering through implementation.
• Translate complex requirements into actionable development tasks.
• Apply design skills and hands-on coding experience.
• Take a proactive approach to testing, troubleshooting, and application refinement.
• Work with cross-functional teams on software integration.

Required Skill and Experience:

• Independently investigate security alerts, contribute to threat detection improvements, and collaborate with cross-functional teams.
• Analyze security alerts using CrowdStrike NGSIEM/EDR, Exabeam SIEM/UEBA, Wiz, and Proofpoint.
• Analyze and validate UEBA anomalies and behavioral threats.
• Support incident response for medium- to high-severity incidents.
• Assist with root cause analysis and document incident findings.
• Tune SIEM rules, detection logic, and alert thresholds.
• Identify detection gaps and contribute to threat hunting and use case development.
• Participate in incident bridge calls and coordinate with internal teams.
• Collaborate with SOC, Incident Response, Threat Intelligence, Cloud, IAM, and Infrastructure teams.
• Provide stakeholder updates and maintain incident documentation.
• Maintain runbooks, playbooks, and knowledge base articles.
• Stay current on emerging threats and attacker techniques aligned to the MITRE ATT&CK framework.
• Exercise sound judgment when escalating and responding to incidents.
• Communicate effectively with technical teams and stakeholders.

Preferred Skill and Experience:

• Experience in SOC, incident response, or threat hunting, including independently handling critical or major incidents.
• Hands-on expertise with CrowdStrike EDR/NGSIEM, Exabeam SIEM/UEBA, Wiz, DAM, and Proofpoint.
• Understanding of the incident response lifecycle, threat detection, and the MITRE ATT&CK framework.
• Experience with log analysis, SIEM query development, and detection rule tuning.
• Excellent client communication, reporting, and cross-team collaboration.
• Strong analytical mindset, ownership, ability to work under pressure, and on-call flexibility.

Additional Required Qualifications:

• Bachelor's degree or foreign equivalent from an accredited institution, or three years of progressive experience in the specialty in lieu of each year of education.
• This position may require relocation and/or travel to the work or project location.
• Candidates must be authorized to work for any employer in the United States without employer-based visa sponsorship. Infosys is unable to provide immigration sponsorship now or in the future.

Benefits:

Along with competitive pay, full-time Infosys employees are eligible for medical, dental, vision, and life insurance; long-term and short-term disability; health and dependent care reimbursement accounts; accident, critical illness, hospital indemnity, and legal insurance; a 401(k) plan with contributions dependent on salary level; and paid holidays and paid time off.