Offshore Information Security Analyst

We are seeking two Certified Information Security Analysts for American Campus Communities (ACC), a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. These are full-time, exempt roles based in Bengaluru, India and hired through Revantage India. Each analyst reports to ACC's Chief Information Security Officer (CISO) and works as an integrated member of the Security and IT Operations team.

Working alongside software developers, system engineers, cybersecurity engineers, systems administrators and business representatives, the analysts will monitor and analyze security incidents, vulnerabilities and events that may affect ACC; enhance security tools and automation; and help protect clients, systems and data from internal and external threats. The roles provide analysis, response and resolution planning for detected issues and participate in cyber incident response.

One position will align primarily to US Central Time; the other will maintain meaningful daily overlap with US Central Time. Both positions participate in rotating on-call coverage for US nights and weekends and provide coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE

• Monitor, analyze and report on security detections from logging and monitoring systems, using threat intelligence to discover, triage, prioritize and document potential incidents.

• Monitor and triage client and internal requests, document incident response activities, and support analysis, containment and resolution planning.

• Maintain and improve existing security tools and contribute to new tools and automation for incident detection and response.

• Serve as a primary administrator for Black Kite, Proofpoint, NINJIO and Rapid7 InsightVM, and respond to alerts from those platforms as well as Microsoft Defender, CrowdStrike and Zscaler.

• Collaborate with internal stakeholders and third parties to assess, respond to and resolve vendor and supply-chain security incidents.

• Partner with the broader IT organization to prioritize and remediate security vulnerabilities.

• Support internal and external audits by gathering evidence, responding to requests and helping address identified gaps.

• Compile and update monthly security metrics, reports and dashboards using data from multiple security platforms.

• Help execute strategies that increase security awareness and knowledge throughout the organization.

• Work with management and business leaders to advance Information Risk Management's strategy and priorities.

• Engage stakeholders throughout the company to understand business needs and provide practical security guidance and subject-matter expertise.

• Represent Information Security in planning, requirements-gathering, project-management and rollout meetings across the business and IT.

• Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.

• Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS

To perform this job successfully, an individual must be able to perform each critical duty satisfactorily. The requirements below are representative of the knowledge, skills and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform these critical functions.

• Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Gemini.

• Knowledge of AI security risks and controls, with experience assessing, monitoring and supporting the secure adoption and use of AI technologies in accordance with organizational policies and industry best practices.

• Strong working knowledge of Windows Server, Microsoft Azure, endpoint detection and response (EDR), managed detection and response (MDR), and data loss prevention (DLP).

• Experience assessing, implementing, optimizing and documenting a broad set of security technologies and processes, including data protection, identity and access management (IAM), network security, and IaaS, PaaS and other computing environments.

• Experience with cloud security and governance tools, server virtualization technologies and vendor security reviews.

• Current knowledge of incident response, secure system configuration, vulnerability management and hardening guidance, including the Center for Internet Security (CIS) Controls and Benchmarks.

• Working knowledge of applicable frameworks and regulatory requirements, including PCI DSS, HIPAA, GLBA, GDPR, NIST and ISO standards.

• Excellent written and verbal business-English communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders across cultures and time zones.

• A self-directed, hands-on approach, with the ability to work independently and productively with remote team members and limited direct supervision.

• Strong analytical and problem-solving skills, including the ability to define problems, collect and evaluate data, establish facts and draw sound conclusions while considering multiple variables.

• High attention to detail, with the ability to manage competing priorities, meet multiple deadlines and remain effective during operational pressure.

• Ability to write clear reports, business correspondence and procedural manuals, and to create meaningful security metrics and dashboards.

EDUCATION & EXPERIENCE

• Bachelor's degree in information technology, cybersecurity, computer science or a related field.

• At least three years of hands-on cybersecurity practitioner experience; five or more years is preferred.

• At least two years of experience with Amazon Web Services (AWS), Microsoft Azure, Google Cloud or IBM Cloud, and VMware.

SECURITY TOOLS

• Hands-on experience using and maintaining enterprise-grade security tools, including Microsoft Defender; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; Proofpoint TAP and DLP; NINJIO; Black Kite; and Rapid7 InsightVM.

• Demonstrated ability to extract, validate and communicate reports and operational metrics from these platforms.

CERTIFICATES & LICENSES

• Required certifications: CompTIA Security+; Proofpoint Certified Threat Protection Analyst; Proofpoint Certified Information Protection Analyst; CompTIA Cybersecurity Analyst (CySA+); and CompTIA SecAI+ (Security AI+).

• Preferred certifications: Certified Cloud Security Professional (CCSP) and ITIL Foundation.