Information Security Engineer

Position Summary

Reporting to the CISO, the Information Security Engineer is responsible for implementing, maintaining, and continuously improving enterprise cybersecurity technologies that protect the organization's systems, applications, cloud environments, and data. This role works closely with infrastructure, cloud, networking, application development, and security operations teams to identify risk, implement security controls, respond to security events, and improve the organization's overall security posture. The successful candidate combines technical expertise with strong analytical skills and a collaborative mindset to help reduce cyber risk while enabling business innovation.

Work Hours: US CT with rotational on call US nights and weekends, and US & India holidays

Essential Responsibilities

· Design, implement, administer, and support enterprise security technologies across cloud, on-premises, and SaaS environments.

· Monitor security posture and proactively identify risks, vulnerabilities, and misconfigurations.

· Conduct vulnerability assessments and coordinate remediation activities across technology teams.

· Support security incident detection, investigation, containment, and recovery activities.

· Assist in implementation and administration of Identity and Access Management (IAM), MFA, Privileged Access Management (PAM), and Zero Trust initiatives.

· Develop security automation using scripting and orchestration tools to improve operational efficiency.

· Implement security hardening standards for servers, workstations, cloud services, and enterprise applications.

· Participate in architecture reviews and technology projects to ensure security requirements are incorporated early in the design process.

· Support regulatory compliance initiatives including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA, and other applicable standards.

· Develop documentation including standards, procedures, diagrams, and operational runbooks.

· Evaluate emerging threats and recommend security improvements.

· Participate in incident response activities, including after-hours, when required.

· Participate in a rotating holiday coverage schedule, including Indian holidays, to ensure uninterrupted support for a U.S.-based enterprise.

· Provide support outside normal business hours as operational needs dictate, including incident response and critical production events.

· Support a 24×7 operational environment through scheduled rotation, on-call responsibilities, and business continuity requirements.

· Perform other duties as assigned.

Competencies

· Strong understanding of enterprise cybersecurity principles and best practices.

· Experience with Microsoft Azure, AWS, or Google Cloud security services.

· Knowledge of endpoint, network, identity, email, and cloud security technologies.

· Familiarity with SIEM, EDR/XDR, vulnerability management, and security monitoring platforms.

· Working knowledge of scripting languages such as PowerShell, Python, or Bash.

· Understanding of Identity and Access Management concepts including SSO, OAuth, OpenID Connect, and Active Directory.

· Strong troubleshooting and analytical skills.

· Excellent written and verbal communication skills.

· Ability to collaborate effectively across technical and business teams.

· Proficient in the best practices for the secure use of Generative AI tools including ChatGPT, Claude, Microsoft Copilot, Google Gemini, and similar enterprise AI platforms.

· Experience designing, implementing, and maintaining security controls for Artificial Intelligence (AI) and Generative AI technologies, including governance, data protection, model security, prompt and output security, monitoring, risk management, and compliance with organizational policies and applicable regulatory requirements.

Qualifications

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent professional experience.

Experience

· 3–6 years of hands-on cybersecurity or information security engineering experience.

· Experience securing Windows, Linux, cloud, and SaaS environments.

· Experience supporting enterprise security technologies.

· Familiarity with cloud security architecture and enterprise infrastructure.

· 2+ years hands-on administrator-level experience with enterprise security tools including:

· MS Defender,

· CrowdStrike's Falcon MDR, ITP, Shield, Recon+, Cloud, and NG SIEM,

· Wiz,

· Zscaler ZIA, ZPA, ZDX, ZTA,

· Proofpoint TAP, DLP,

· And extracting reports/metrics from all these tools

Certifications

· CompTIA SecAI+

· CrowdStrike Certified SIEM Engineer

· CrowdStrike Certified Falcon Administrator

· CrowdStrike Certified Falcon Responder

· CrowdStrike Certified Falcon Hunter

· Zscaler Digital Transformation Engineer

· Zscaler Digital Experience Administrator

· Azure Security Engineer Associate

· Certified Cloud Security Professional

Job Applicant Privacy Notice

EEO Statement

The Company is an equal opportunity employer. In accordance with applicable law, we prohibit discrimination against any applicant, employee, or other covered person based on any legally recognized basis, including, but not limited to: veteran status, uniformed servicemember status, race, color, caste, immigration status, religion, religious creed (including religious dress and grooming practices), sex, gender, gender expression, gender identity, marital status, sexual orientation, pregnancy (including childbirth, lactation or related medical conditions), age, national origin or ancestry, citizenship, physical or mental disability, genetic information (including testing and characteristics), protected leave status, domestic violence victim status, or any other consideration protected by federal, state or local law. We are committed to providing reasonable accommodations, if you need an accommodation to complete the application process, please email [email protected]