Information Security Engineer

About the Company

GP Strategies is a global talent transformation organization that helps businesses create meaningful change through learning, consulting, and talent technology services. With more than 55 years of experience and a worldwide network of learning specialists, the company has supported over 6,000 organizations across the globe.

Role Overview

The Information Security Engineer will monitor, investigate, and act on security events to help safeguard endpoints, identities, and cloud platforms. The role also focuses on lowering risk through vulnerability management, patch coordination, cloud security posture reviews, automation, reporting, and support for audit and vendor assurance work.

Job Details

Job Title: IT Security Analyst

Department: IT Security

Business Unit / Division: IT Services / Corporate Services

Location: India — Tamil Nadu or Karnataka

Key Responsibilities

• Track, assess, and respond to security alerts and escalations so threats are identified and contained quickly.
• Review security logs and telemetry to spot suspicious behavior such as unauthorized access attempts or lateral movement.
• Prepare well-structured incident write-ups that include root cause analysis and practical follow-up actions.
• Run vulnerability scans and support remediation efforts using Tenable.io to reduce exposure across existing systems.
• Assist with patching and software updates for Windows, macOS, and Linux using Microsoft Intune and Quest KACE SMA.
• Coordinate endpoint patching activities and help ensure vulnerabilities are resolved without delay.
• Support cloud security posture management by reviewing AWS and Azure environments against CIS Benchmarks and internal policies.
• Operate and monitor the Microsoft Defender suite for threat detection and investigation across endpoints, identities, and cloud workloads.
• Build and maintain automated security playbooks and workflows to improve response speed and reduce repetitive manual work.
• Carry out phishing simulations to measure employee awareness and identify groups that may need additional security guidance.
• Provide evidence and technical inputs for internal and external audits, while helping teams align with required standards.
• Take part in software and vendor onboarding to confirm third-party integrations meet security expectations.

What Success Looks Like

• Security events are handled consistently, escalations are resolved promptly, and investigations are clearly documented.
• Vulnerability scans are performed regularly, remediation is tracked, and patching lowers risk across Windows, macOS, and Linux environments.
• AWS and Azure environments are assessed routinely, and findings are turned into practical security improvements.
• Security workflows continue to improve through automation and lessons learned from incidents.

Candidate Profile

The ideal candidate is comfortable working in a fast-moving security operations environment, enjoys investigating issues through data and logs, and is able to collaborate with technical and business teams to reduce risk.

Additional Information

This position offers the opportunity to work across endpoint, identity, and cloud security. The role combines monitoring, vulnerability management, posture assurance, audit support, vendor assurance, and process improvement through automation.

Note: The source included duplicate and expanded versions of the same role outline; all substantive duties and expectations have been consolidated here.