Information Security Engineer

Position Summary

Reporting to the CISO the Information Security Engineer is responsible for implementing maintaining and continuously improving enterprise cybersecurity technologies that protect the organizations systems applications cloud environments and data. This role works closely with infrastructure cloud networking application development and security operations teams to identify risk implement security controls respond to security events and improve the organizations overall security posture. The successful candidate combines technical expertise with strong analytical skills and a collaborative mindset to help reduce cyber risk while enabling business innovation.

Work Hours: US CT with rotational on call US nights and weekends and US & India holidays

Essential Responsibilities

Design implement administer and support enterprise security technologies across cloud on-premises and SaaS environments.

Monitor security posture and proactively identify risks vulnerabilities and misconfigurations.

Conduct vulnerability assessments and coordinate remediation activities across technology teams.

Support security incident detection investigation containment and recovery activities.

Assist in implementation and administration of Identity and Access Management (IAM) MFA Privileged Access Management (PAM) and Zero Trust initiatives.

Develop security automation using scripting and orchestration tools to improve operational efficiency.

Implement security hardening standards for servers workstations cloud services and enterprise applications.

Participate in architecture reviews and technology projects to ensure security requirements are incorporated early in the design process.

Support regulatory compliance initiatives including NIST CSF CIS Controls PCI DSS HIPAA GDPR GLBA and other applicable standards.

Develop documentation including standards procedures diagrams and operational runbooks.

Evaluate emerging threats and recommend security improvements.

Participate in incident response activities including after-hours when required.

Participate in a rotating holiday coverage schedule including Indian holidays to ensure uninterrupted support for a U.S.-based enterprise.

Provide support outside normal business hours as operational needs dictate including incident response and critical production events.

Support a 247 operational environment through scheduled rotation on-call responsibilities and business continuity requirements.

Perform other duties as assigned.

Competencies

Strong understanding of enterprise cybersecurity principles and best practices.

Experience with Microsoft Azure AWS or Google Cloud security services.

Knowledge of endpoint network identity email and cloud security technologies.

Familiarity with SIEM EDR/XDR vulnerability management and security monitoring platforms.

Working knowledge of scripting languages such as PowerShell Python or Bash.

Understanding of Identity and Access Management concepts including SSO OAuth OpenID Connect and Active Directory.

Strong troubleshooting and analytical skills.

Excellent written and verbal communication skills.

Ability to collaborate effectively across technical and business teams.

Proficient in the best practices for the secure use of Generative AI tools including ChatGPT Claude Microsoft Copilot Google Gemini and similar enterprise AI platforms.

Experience designing implementing and maintaining security controls for Artificial Intelligence (AI) and Generative AI technologies including governance data protection model security prompt and output security monitoring risk management and compliance with organizational policies and applicable regulatory requirements.

Qualifications

Education

Bachelors degree in Information Technology Computer Science Cybersecurity or related field or equivalent professional experience.

Experience

36 years of hands-on cybersecurity or information security engineering experience.

Experience securing Windows Linux cloud and SaaS environments.

Experience supporting enterprise security technologies.

Familiarity with cloud security architecture and enterprise infrastructure.

2 years hands-on administrator-level experience with enterprise security tools including:

MS Defender

CrowdStrikes Falcon MDR ITP Shield Recon Cloud and NG SIEM

Wiz

Zscaler ZIA ZPA ZDX ZTA

Proofpoint TAP DLP

And extracting reports/metrics from all these tools

Certifications

CompTIA SecAI

CrowdStrike Certified SIEM Engineer

CrowdStrike Certified Falcon Administrator

CrowdStrike Certified Falcon Responder

CrowdStrike Certified Falcon Hunter

Zscaler Digital Transformation Engineer

Zscaler Digital Experience Administrator

Azure Security Engineer Associate

Certified Cloud Security Professional

Job Applicant Privacy Notice

EEO Statement

The Company is an equal opportunity accordance with applicable law we prohibit discrimination against any applicant employee or other covered person based on any legally recognized basis including but not limited to: veteran status uniformed servicemember status race color caste immigration status religion religious creed (including religious dress and grooming practices) sex gender gender expression gender identity marital status sexual orientation pregnancy (including childbirth lactation or related medical conditions) age national origin or ancestry citizenship physical or mental disability genetic information (including testing and characteristics) protected leave status domestic violence victim status or any other consideration protected by federal state or local law. We are committed to providing reasonable accommodations if you need an accommodation to complete the application process please email