Associate, Information Security Analyst

ABOUT REVANTAGE Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.

With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors.

The company’s footprint extends across North America, Europe and Asia Pacific.

Creating a culture that inspires impact and momentum requires the right team.

We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.

In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform.

India With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.

Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.

ROLE SUMMARY We are seeking two Certified Information Security Analysts for , a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States.

These are full-time, exempt roles based in Bengaluru, India and hired through Revantage India.

Each analyst reports to Chief Information Security Officer (CISO) and works as an integrated member of the Security and IT Operations team.

Working alongside software developers, system engineers, cybersecurity engineers, systems administrators and business representatives, the analysts will monitor and analyze security incidents, vulnerabilities and events that may affect ; enhance security tools and automation; and help protect clients, systems and data from internal and external threats.

The roles provide analysis, response and resolution planning for detected issues and participate in cyber incident response.

One position will align primarily to US Central Time; the other will maintain meaningful daily overlap with US Central Time.

Both positions participate in rotating on-call coverage for US nights and weekends and provide coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE Monitor, analyze and report on security detections from logging and monitoring systems, using threat intelligence to discover, triage, prioritize and document potential incidents.

Monitor and triage client and internal requests, document incident response activities, and support analysis, containment and resolution planning.

Maintain and improve existing security tools and contribute to new tools and automation for incident detection and response.

Serve as a primary administrator for Black Kite, Proofpoint, NINJIO and Rapid7 InsightVM, and respond to alerts from those platforms as well as Microsoft Defender, CrowdStrike and Zscaler.

Collaborate with internal stakeholders and third parties to assess, respond to and resolve vendor and supply-chain security incidents.

Partner with the broader IT organization to prioritize and remediate security vulnerabilities.

Support internal and external audits by gathering evidence, responding to requests and helping address identified gaps.

Compile and update monthly security metrics, reports and dashboards using data from multiple security platforms.

Help execute strategies that increase security awareness and knowledge throughout the organization.

Work with management and business leaders to advance Information Risk Management's strategy and priorities.

Engage stakeholders throughout the company to understand business needs and provide practical security guidance and subject-matter expertise.

Represent Information Security in planning, requirements-gathering, project-management and rollout meetings across the business and IT.

Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.

Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS To perform this job successfully, an individual must be able to perform each critical duty satisfactorily.

The requirements below are representative of the knowledge, skills and abilities required.

Reasonable accommodations may be made to enable individuals with disabilities to perform these critical functions.

Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Gemini.

Knowledge of AI security risks and controls, with experience assessing, monitoring and supporting the secure adoption and use of AI technologies in accordance with organizational policies and industry best practices.

Strong working knowledge of Windows Server, Microsoft Azure, endpoint detection and response (EDR), managed detection and response (MDR), and data loss prevention (DLP).

Experience assessing, implementing, optimizing and documenting a broad set of security technologies and processes, including data protection, identity and access management (IAM), network security, and IaaS, PaaS and other computing environments.

Experience with cloud security and governance tools, server virtualization technologies and vendor security reviews.

Current knowledge of incident response, secure system configuration, vulnerability management and hardening guidance, including the Center for Internet Security (CIS) Controls and Benchmarks.

Working knowledge of applicable frameworks and regulatory requirements, including PCI DSS, HIPAA, GLBA, GDPR, NIST and ISO standards.

Excellent written and verbal