Information Security Engineer
About the role
The Information Security Engineer will join a US-based client's remote operations team in Sri Lanka. The role involves monitoring and investigating security alerts and incidents, managing vulnerability scanning and remediation, and overseeing endpoint and email security. The engineer will also work on improving security across AWS environments, Microsoft 365, and Entra ID, as well as developing security detection rules and automating security operations. Additional responsibilities include supporting cloud, Kubernetes, CI/CD, and application-security initiatives, automating reporting, and assisting with SOX audits and incident response.
Must have
- Strong knowledge of AWS Security, Microsoft 365, Entra ID, IAM, and cloud security.
- 6+ years of experience in Information Security, Security Operations, Systems Administration, or a related field.
- Hands-on experience with SIEM/MDR, vulnerability management, endpoint security, and incident response.
- Good knowledge of Windows, Linux, networking, firewalls, and identity security.
- Familiarity with GitHub, GitLab, Jira, CI/CD, and application security.
- Experience with Rapid7, Wiz/Orca, Sophos, Bitdefender, Microsoft Defender, or similar security platforms.
- Experience with PowerShell/Python, REST APIs, and AWS CLI.
- Strong analytical, communication, documentation, and problem-solving skills.
Nice to have
- Familiarity with AI concepts, modern AI-powered development tools, and cloud-based coding environments is highly desirable.
Technologies
- Authentication
- AWS
- Azure
- CI/CD
- CLI
- Cloud Security
- DevOps
- Microsoft Entra ID
- Firewall
- GitHub
- GitLab
- IAM
- Jira
- Kubernetes
- Linux
- Microsoft 365
- PowerShell
- Python
- Rapid7
- REST
- SIEM
- Vulnerability Scanning
- Windows
Highlights
The position is remote and based in Sri Lanka, supporting a US-based client. Familiarity with AI concepts and modern AI-powered development tools is highly desirable.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka