Our US-based client is seeking Information Security Engineers to join its remote operations team in Sri Lanka.

Monitor and investigate security alerts, incidents, and suspicious activities using Rapid7 InsightIDR/MDR.
Manage vulnerability scanning, risk prioritization, and remediation using Rapid7 InsightVM.
Monitor endpoint and email security using Sophos, Bitdefender, Microsoft Defender for Office 365, and Check Point Harmony Email.
Monitor and improve security across AWS multi-account environments using Wiz, Orca, IAM, CloudTrail, and other AWS security services.
Monitor Microsoft 365 and Entra ID security, including privileged access, authentication, and MFA events.
Develop and maintain security detection rules, alerts, integrations, and automation.
Support cloud, Kubernetes, CI/CD, and application-security initiatives with DevOps and Engineering teams.
Automate security operations and reporting using PowerShell, Python, REST APIs, and AWS CLI.
Support SOX audits, security documentation, evidence collection, and incident response.

5+ years of experience in Information Security, Security Operations, Systems Administration, or a related field.
Hands-on experience with SIEM/MDR, vulnerability management, endpoint security, and incident response.
Good knowledge of Windows, Linux, networking, firewalls, and identity security.
Familiarity with GitHub, GitLab, Jira, CI/CD, and application security.
Familiarity with AI concepts, modern AI-powered development tools, and cloud-based coding environments is highly desirable.
Strong knowledge of AWS Security, Microsoft 365, Entra ID, IAM, and cloud security.
Experience with Rapid7, Wiz/Orca, Sophos, Bitdefender, Microsoft Defender, or similar security platforms.
Experience with PowerShell/Python, REST APIs, and AWS CLI.
Strong analytical, communication, documentation, and problem-solving skills.

To apply, click on the advertisement to visit www.cms.lk or email your resume to [email protected] with the subject "Information Security Engineer".