Information Security Engineer

Revantage, A Blackstone Portfolio Company; Bengaluru; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

Revantage, a Blackstone portfolio company, in Bengaluru, seeks an Information Security Engineer to implement and continuously improve enterprise cybersecurity across cloud, on‑premises, and SaaS environments, collaborating with infrastructure, cloud, and security operations teams.

You will perform vulnerability assessments, support IAM/PAM and Zero Trust, develop security automation, and help meet regulatory requirements while responding to incidents and maintaining 24×7 operations.

Qualifications

• 3–6 years of hands-on cybersecurity or information security engineering experience.

Responsibilities

• Design, implement, administer, and support enterprise security technologies across cloud, on-premises, and SaaS environments.
• Monitor security posture and proactively identify risks, vulnerabilities, and misconfigurations.
• Conduct vulnerability assessments and coordinate remediation activities across technology teams.
• Support security incident detection, investigation, containment, and recovery activities.
• Assist in implementation and administration of IAM, MFA, PAM, and Zero Trust initiatives.
• Develop security automation using scripting and orchestration tools to improve operational efficiency.
• Implement security hardening standards for servers, workstations, cloud services, and enterprise applications.
• Participate in architecture reviews and technology projects to ensure security requirements are incorporated early in the design process.
• Support regulatory compliance initiatives including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA, and other applicable standards.
• Develop documentation including standards, procedures, diagrams, and operational runbooks.
• Evaluate emerging threats and recommend security improvements.
• Participate in incident response activities, including after-hours, when required.
• Participate in a rotating holiday coverage schedule, including Indian holidays, to ensure uninterrupted support for a U.S.-based enterprise.
• Provide support outside normal business hours as operational needs dictate, including incident response and critical production events.
• Support a 24×7 operational environment through scheduled rotation, on-call responsibilities, and business continuity requirements.
• Perform other duties as assigned.

Skills

Cloud security

Vulnerability management

IAM & MFA

Scripting (PowerShell/Python/Bash)

Incident response

Security monitoring

Threat detection

Communication

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field

Tools

MS Defender

CrowdStrike Falcon MDR

ITP

CrowdStrike Falcon Administrator

Wiz

Zscaler ZIA/ZPA

Zscaler ZDX

Proofpoint TAP/DLP

NG SIEM

Job description

Position Summary

Reporting to the CISO, the Information Security Engineer is responsible for implementing, maintaining, and continuously improving enterprise cybersecurity technologies that protect the organization's systems, applications, cloud environments, and data. This role works closely with infrastructure, cloud, networking, application development, and security operations teams to identify risk, implement security controls, respond to security events, and improve the organization's overall security posture. The successful candidate combines technical expertise with strong analytical skills and a collaborative mindset to help reduce cyber risk while enabling business innovation.

Work Hours

US CT with rotational on call US nights and weekends, and US & India holidays

Essential Responsibilities

• Design, implement, administer, and support enterprise security technologies across cloud, on-premises, and SaaS environments.
• Monitor security posture and proactively identify risks, vulnerabilities, and misconfigurations.
• Conduct vulnerability assessments and coordinate remediation activities across technology teams.
• Support security incident detection, investigation, containment, and recovery activities.
• Assist in implementation and administration of Identity and Access Management (IAM), MFA, Privileged Access Management (PAM), and Zero Trust initiatives.
• Develop security automation using scripting and orchestration tools to improve operational efficiency.
• Implement security hardening standards for servers, workstations, cloud services, and enterprise applications.
• Participate in architecture reviews and technology projects to ensure security requirements are incorporated early in the design process.
• Support regulatory compliance initiatives including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA, and other applicable standards.
• Develop documentation including standards, procedures, diagrams, and operational runbooks.
• Evaluate emerging threats and recommend security improvements.
• Participate in incident response activities, including after-hours, when required.
• Participate in a rotating holiday coverage schedule, including Indian holidays, to ensure uninterrupted support for a U.S.-based enterprise.
• Provide support outside normal business hours as operational needs dictate, including incident response and critical production events.
• Support a 24×7 operational environment through scheduled rotation, on-call responsibilities, and business continuity requirements.
• Perform other duties as assigned.

Competencies

• Strong understanding of enterprise cybersecurity principles and best practices.
• Experience with Microsoft Azure, AWS, or Google Cloud security services.
• Knowledge of endpoint, network, identity, email, and cloud security technologies.
• Familiarity with SIEM, EDR/XDR, vulnerability management, and security monitoring platforms.
• Working knowledge of scripting languages such as PowerShell, Python, or Bash.
• Understanding of Identity and Access Management concepts including SSO, OAuth, OpenID Connect, and Active Directory.
• Strong troubleshooting and analytical skills.
• Excellent written and verbal communication skills.
• Ability to collaborate effectively across technical and business teams.
• Proficient in the best practices for the secure use of Generative AI tools including ChatGPT, Claude, Microsoft Copilot, Google Gemini, and similar enterprise AI platforms.
• Experience designing, implementing, and maintaining security controls for Artificial Intelligence (AI) and Generative AI technologies, including governance, data protection, model security, prompt and output security, monitoring, risk management, and compliance with organizational policies and applicable regulatory requirements.

Qualifications

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent professional experience.

Experience

• 3–6 years of hands‑on cybersecurity or information security engineering experience.
• Experience securing Windows, Linux, cloud, and SaaS environments.
• Experience supporting enterprise security technologies.
• Familiarity with cloud security architecture and enterprise infrastructure.
• 2+ years hands‑on administrator‑level experience with enterprise security tools including:
• MS Defender,
• CrowdStrike's Falcon MDR, ITP, Shield, Recon+, Cloud, and NG SIEM,
• Wiz,
• Zscaler ZIA, ZPA, ZDX, ZTA,
• Proofpoint TAP, DLP,
• And extracting reports/metrics from all these tools

Certifications

• CompTIA SecAI+
• CrowdStrike Certified SIEM Engineer
• CrowdStrike Certified Falcon Administrator