OffShore Information Security Engineer

We are seeking a mid-level Information Security Engineer for American Campus Communities (ACC), a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. This role is based in Bengaluru, India, hired through Revantage India and reports to ACC's Chief Information Security Officer (CISO).

The Information Security Engineer implements, maintains and continuously improves enterprise cybersecurity technologies that protect ACC's systems, applications, cloud environments and data. The role works closely with infrastructure, cloud, networking, application-development and security-operations teams to identify risk, implement security controls, respond to security events and strengthen the organization's overall security posture.

The successful candidate combines technical depth, strong analytical skills and a collaborative mindset to reduce cyber risk while enabling business innovation. Working hours will align to US Central Time, with rotating on-call coverage for US nights and weekends and coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE

• Design, implement, administer and support enterprise security technologies across cloud, on-premises and Software as a Service (SaaS) environments.

• Monitor security posture and proactively identify risks, vulnerabilities and security misconfigurations.

• Conduct vulnerability assessments, prioritize findings and coordinate remediation across technology teams.

• Support security-incident detection, investigation, containment, eradication and recovery activities.

• Assist with the implementation and administration of Identity and Access Management (IAM), multifactor authentication (MFA), Privileged Access Management (PAM) and Zero Trust initiatives.

• Develop security automation using scripting and orchestration tools to improve control consistency, response speed and operational efficiency.

• Implement and maintain security-hardening standards for servers, workstations, cloud services and enterprise applications.

• Participate in architecture reviews and technology projects to incorporate security requirements early in the design process.

• Support regulatory and control-framework initiatives, including NIST CSF, CIS Controls, PCI DSS, HIPAA, GDPR, GLBA and other applicable requirements.

• Develop and maintain security standards, procedures, technical diagrams and operational runbooks.

• Evaluate emerging threats and technologies, assess their relevance to ACC and recommend practical security improvements.

• Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.

• Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS

• Strong understanding of enterprise cybersecurity principles, architecture and operational best practices.

• Experience with security services in Microsoft Azure, Amazon Web Services (AWS) or Google Cloud.

• Working knowledge of endpoint, network, identity, email and cloud-security technologies.

• Familiarity with SIEM, EDR/XDR, vulnerability-management and security-monitoring platforms.

• Working knowledge of scripting and automation using PowerShell, Python or Bash.

• Understanding of Identity and Access Management concepts and technologies, including SSO, OAuth, OpenID Connect and Active Directory.

• Strong troubleshooting, analytical and problem-solving skills.

• Excellent written and verbal business-English communication skills.

• Ability to collaborate effectively with technical and business teams across cultures and time zones.

• Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Google Gemini.

• Experience designing, implementing and maintaining security controls for AI and generative AI technologies, including governance, data protection, model security, prompt and output security, monitoring, risk management, organizational policy and applicable regulatory requirements.

EDUCATION & EXPERIENCE

• Bachelor's degree in information technology, computer science, cybersecurity or a related field, or equivalent professional experience.

• Three to six years of hands-on cybersecurity or information-security engineering experience.

• Experience securing Windows, Linux, cloud and SaaS environments.

• Experience supporting enterprise security technologies and familiarity with cloud-security architecture and enterprise infrastructure.

• At least two years of administrator-level experience with enterprise security platforms and their operational reporting and metrics.

SECURITY TOOLS

• Hands-on experience administering Microsoft Defender; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; and Proofpoint TAP and DLP.

• Demonstrated ability to extract, validate and communicate operational reports and security metrics from these platforms.

CERTIFICATIONS

• CompTIA SecAI+ and Certified Cloud Security Professional (CCSP).

• CrowdStrike Certified SIEM Engineer, CrowdStrike Certified Falcon Administrator, CrowdStrike Certified Falcon Responder and CrowdStrike Certified Falcon Hunter.

• Zscaler Digital Transformation Engineer and Zscaler Digital Experience Administrator.

• Microsoft Certified: Azure Security Engineer Associate.