Information Security Engineer

Reporting to the CISO, the Information Security Engineer is responsible for implementing, maintaining, and continuously improving enterprise cybersecurity technologies that protect the organization's systems, applications, cloud environments, and data.

This role works closely with infrastructure, cloud, networking, application development, and security operations teams to identify risk, implement security controls, respond to security events, and improve the organization's overall security posture.

The successful candidate combines technical expertise with strong analytical skills and a collaborative mindset to help reduce cyber risk while enabling business innovation.

Work Hours: US CT with rotational on call US nights and weekends, and US & India holidays Essential Responsibilities

· Design, implement, administer, and support enterprise security technologies across cloud, on-premises, and SaaS environments.

· Monitor security posture and proactively identify risks, vulnerabilities, and misconfigurations.

· Conduct vulnerability assessments and coordinate remediation activities across technology teams.

· Support security incident detection, investigation, containment, and recovery activities.

· Assist in implementation and administration of Identity and Access Management (IAM), MFA, Privileged Access Management (PAM), and Zero Trust initiatives.

· Develop security automation using scripting and orchestration tools to improve operational efficiency.

· Implement security hardening standards for servers, workstations, cloud services, and enterprise applications.

· Participate in architecture reviews and technology projects to ensure security requirements are incorporated early in the design process.

· Support regulatory compliance initiatives including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA, and other applicable standards.

· Develop documentation including standards, procedures, diagrams, and operational runbooks.

· Evaluate emerging threats and recommend security improvements.

· Participate in incident response activities, including after-hours, when required.

· Participate in a rotating holiday coverage schedule, including Indian holidays, to ensure uninterrupted support for a U.S.-based enterprise.

· Provide support outside normal business hours as operational needs dictate, including incident response and critical production events.

· Support a 24×7 operational environment through scheduled rotation, on-call responsibilities, and business continuity requirements.

· Perform other duties as assigned.