Information Security Engineer

Job Description

Our US-based client is seeking Information Security Engineers to join its remote operations team in Sri Lanka.

Your Responsibilities

• Monitor and investigate security alerts, incidents, and suspicious activities using Rapid7 InsightIDR/MDR.
• Manage vulnerability scanning, risk prioritization, and remediation using Rapid7 InsightVM.
• Monitor endpoint and email security using Sophos, Bitdefender, Microsoft Defender for Office 365, and Check Point Harmony Email.
• Monitor and improve security across AWS multi-account environments using Wiz, Orca, IAM, CloudTrail, and other AWS security services.
• Monitor Microsoft 365 and Entra ID security, including privileged access, authentication, and MFA events.
• Develop and maintain security detection rules, alerts, integrations, and automation.
• Support cloud, Kubernetes, CI/CD, and application-security initiatives with DevOps and Engineering teams.
• Automate security operations and reporting using PowerShell, Python, REST APIs, and AWS CLI.
• Support SOX audits, security documentation, evidence collection, and incident response.

Your Qualifications

• 5+ years of experience in Information Security, Security Operations, Systems Administration, or a related field.
• Hands-on experience with SIEM/MDR, vulnerability management, endpoint security, and incident response.
• Good knowledge of Windows, Linux, networking, firewalls, and identity security.
• Familiarity with GitHub, GitLab, Jira, CI/CD, and application security.
• Familiarity with Al concepts, modern Al-powered development tools, and cloud-based coding environments is highly desirable.
• Strong knowledge of AWS Security, Microsoft 365, Entra ID, IAM, and cloud security.
• Experience with Rapid7, Wiz/Orca, Sophos, Bitdefender, Microsoft Defender, or similar security platforms.
• Experience with PowerShell/Python, REST APIs, and AWS CLI.
• Strong analytical, communication, documentation, and problem-solving skills.