OffShore Information Security Engineer

We are seeking a mid-level Information Security Engineer to join a residential communities organisation specialising in student housing across the United States. This role is based in Bengaluru, India, and is hired through Alchemy Job. The Information Security Engineer is responsible for implementing, maintaining, and continuously improving enterprise cybersecurity technologies that protect systems, applications, cloud environments, and data. The role involves working closely with infrastructure, cloud, networking, application development, and security operations teams to identify risks, implement security controls, respond to security events, and strengthen the organisation's overall security posture.

The successful candidate combines technical depth, strong analytical skills and a collaborative mindset to reduce cyber risk while enabling business innovation. Working hours will align to US Central Time, with rotating on-call coverage for US nights and weekends and coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE

• Design, implement, administer and support enterprise security technologies across cloud, on-premises and Software as a Service (SaaS) environments.

• Monitor security posture and proactively identify risks, vulnerabilities and security misconfigurations.

• Conduct vulnerability assessments, prioritize findings and coordinate remediation across technology teams.

• Support security-incident detection, investigation, containment, eradication and recovery activities.

• Assist with the implementation and administration of Identity and Access Management (IAM), multifactor authentication (MFA), Privileged Access Management (PAM) and Zero Trust initiatives.

• Develop security automation using scripting and orchestration tools to improve control consistency, response speed and operational efficiency.

• Implement and maintain security-hardening standards for servers, workstations, cloud services and enterprise applications.

• Participate in architecture reviews and technology projects to incorporate security requirements early in the design process.

• Support regulatory and control-framework initiatives, including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA and other applicable requirements.

• Develop and maintain security standards, procedures, technical diagrams and operational runbooks.

• Evaluate emerging threats and technologies, assess their relevance to the organization and recommend practical security improvements.

• Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.

• Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS

• Strong understanding of enterprise cybersecurity principles, architecture and operational best practices.

• Experience with security services in Microsoft Azure, Amazon Web Services (AWS) or Google Cloud.

• Working knowledge of endpoint, network, identity, email and cloud-security technologies.

• Familiarity with SIEM, EDR/XDR, vulnerability-management and security-monitoring platforms.

• Working knowledge of scripting and automation using PowerShell, Python or Bash.

• Understanding of Identity and Access Management concepts and technologies, including SSO, OAuth, OpenID Connect and Active Directory.

• Strong troubleshooting, analytical and problem-solving skills.

• Excellent written and verbal business-English communication skills.

• Ability to collaborate effectively with technical and business teams across cultures and time zones.

• Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Google Gemini.

• Experience designing, implementing and maintaining security controls for AI and generative AI technologies, including governance, data protection, model security, prompt and output security, monitoring, risk management, organizational policy and applicable regulatory requirements.

EDUCATION & EXPERIENCE

• Bachelor's degree in information technology, computer science, cybersecurity or a related field, or equivalent professional experience.

• Three to six years of hands-on cybersecurity or information-security engineering experience.

• Experience securing Windows, Linux, cloud and SaaS environments.

• Experience supporting enterprise security technologies and familiarity with cloud-security architecture and enterprise infrastructure.

• At least two years of administrator-level experience with enterprise security platforms and their operational reporting and metrics.

SECURITY TOOLS

• Hands-on experience administering Microsoft Defender; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; and Proofpoint TAP and DLP.

• Demonstrated ability to extract, validate and communicate operational reports and security metrics from these platforms.

CERTIFICATIONS

• CompTIA SecAI+ and Certified Cloud Security Professional (CCSP).

• CrowdStrike Certified SIEM Engineer, CrowdStrike Certified Falcon Administrator, CrowdStrike Certified Falcon Responder and CrowdStrike Certified Falcon Hunter.

• Zscaler Digital Transformation Engineer and Zscaler Digital Experience Administrator.

• Microsoft Certified: Azure Security Engineer Associate.