Associate, Information Security Analyst
Revantage · Bengaluru
ABOUT REVANTAGE
Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.
With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors. The company’s footprint extends across North America, Europe and Asia Pacific.
Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.
In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform.
India
With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.
Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.
ROLE SUMMARY
We are seeking two Certified Information Security Analysts for , a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. These are full-time, exempt roles based in Bengaluru, India and hired through Revantage India. Each analyst reports to Chief Information Security Officer (CISO) and works as an integrated member of the Security and IT Operations team.
Working alongside software developers, system engineers, cybersecurity engineers, systems administrators and business representatives, the analysts will monitor and analyze security incidents, vulnerabilities and events that may affect ; enhance security tools and automation; and help protect clients, systems and data from internal and external threats. The roles provide analysis, response and resolution planning for detected issues and participate in cyber incident response.
One position will align primarily to US Central Time; the other will maintain meaningful daily overlap with US Central Time. Both positions participate in rotating on-call coverage for US nights and weekends and provide coverage on US and India holidays to support uninterrupted operations.
PRIMARY ROLE
- Monitor, analyze and report on security detections from logging and monitoring systems, using threat intelligence to discover, triage, prioritize and document potential incidents.
- Monitor and triage client and internal requests, document incident response activities, and support analysis, containment and resolution planning.
- Maintain and improve existing security tools and contribute to new tools and automation for incident detection and response.
- Serve as a primary administrator for Black Kite, Proofpoint, NINJIO and Rapid7 InsightVM, and respond to alerts from those platforms as well as Microsoft Defender, CrowdStrike and Zscaler.
- Collaborate with internal stakeholders and third parties to assess, respond to and resolve vendor and supply-chain security incidents.
- Partner with the broader IT organization to prioritize and remediate security vulnerabilities.
- Support internal and external audits by gathering evidence, responding to requests and helping address identified gaps.
- Compile and update monthly security metrics, reports and dashboards using data from multiple security platforms.
- Help execute strategies that increase security awareness and knowledge throughout the organization.
- Work with management and business leaders to advance Information Risk Management's strategy and priorities.
- Engage stakeholders throughout the company to understand business needs and provide practical security guidance and subject-matter expertise.
- Represent Information Security in planning, requirements-gathering, project-management and rollout meetings across the business and IT.
- Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.
- Perform other projects and responsibilities as assigned.
QUALIFICATIONS & SKILLS
To perform this job successfully, an individual must be able to perform each critical duty satisfactorily. The requirements below are representative of the knowledge, skills and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform these critical functions.
- Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Gemini.
- Knowledge of AI security risks and controls, with experience assessing, monitoring and supporting the secure adoption and use of AI technologies in accordance with organizational policies and industry best practices.
- Strong working knowledge of Windows Server, Microsoft Azure, endpoint detection and response (EDR), managed detection and response (MDR), and data loss prevention (DLP).
- Experience assessing, implementing, optimizing and documenting a broad set of security technologies and processes, including data protection, identity and access management (IAM), network security, and IaaS, PaaS and other computing environments.
- Experience with cloud security and governance tools, server virtualization technologies and vendor security reviews.
- Current knowledge of incident response, secure system configuration, vulnerability management and hardening guidance, including the Center for Internet Security (CIS) Controls and Benchmarks.
- Working knowledge of applicable frameworks and regulatory requirements, including PCI DSS, HIPAA, GLBA, GDPR, NIST and ISO standards.
- Excellent written and verbal business-English communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders across cultures and time zones.
- A self-directed, hands-on approach, with the ability to work independently and productively with remote team members and limited direct supervision.
- Strong analytical and problem-solving skills, including the ability to define problems, collect and evaluate data, establish facts and draw sound conclusions while considering multiple variables.
- High attention to detail, with the ability to manage competing priorities, meet multiple deadlines and remain effective during operational pressure.
- Ability to write clear reports, business correspondence and procedural manuals, and to create meaningful security metrics and dashboards.
EDUCATION & EXPERIENCE
- Bachelor's degree in information technology, cybersecurity, computer science or a related field.
- At least three years of hands-on cybersecurity practitioner experience; five or more years is preferred.
- At least two years of experience with Amazon Web Services (AWS), Microsoft Azure, Google Cloud or IBM Cloud, and VMware.
SECURITY TOOLS
- Hands-on experience using and maintaining enterprise-grade security tools, including Microsoft Defender; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; Proofpoint TAP and DLP; NINJIO; Black Kite; and Rapid7 InsightVM.
- Demonstrated ability to extract, validate and communicate reports and operational metrics from these platforms.
CERTIFICATES & LICENSES
- Required certifications: CompTIA Security+; Proofpoint Certified Threat Protection Analyst; Proofpoint Certified Information Protection Analyst; CompTIA Cybersecurity Analyst (CySA+); and CompTIA SecAI+ (Security AI+).
- Preferred certifications: Certified Cloud Security Professional (CCSP) and ITIL Foundation.
EEO Statement
The Company is an equal opportunity employer. In accordance with applicable law, we prohibit discrimination against any applicant, employee, or other covered person based on any legally recognized basis, including, but not limited to: veteran status, uniformed servicemember status, race, color, caste, immigration status, religion, religious creed (including religious dress and grooming practices), sex, gender, gender expression, gender identity, marital status, sexual orientation, pregnancy (including childbirth, lactation or related medical conditions), age, national origin or ancestry, citizenship, physical or mental disability, genetic information (including testing and characteristics), protected leave status, domestic violence victim status, or any other consideration protected by federal, state or local law. We are committed to providing reasonable accommodations, if you need an accommodation to complete the application process, please email TalentAcquisitionIndia@revantage.com