Senior Cyber Security Engineer

Description:

The Senior Cyber Security Engineer is a full-time, on-site role based in Lahore, responsible for designing, implementing, and maintaining security controls across applications, networks, and systems. Day-to-day tasks include performing security assessments, monitoring for threats and vulnerabilities, analyzing security incidents, and coordinating remediation activities with engineering and infrastructure teams. The role involves developing and enforcing security policies and standards, conducting regular vulnerability assessments and penetration tests, and supporting secure software development practices. The engineer will collaborate with cross-functional stakeholders to ensure regulatory and internal compliance, prepare security documentation and reports, and mentor junior team members on cybersecurity best practices. This position requires proactive involvement in improving the organization’s security posture and resilience against evolving threats.

Qualifications

• Candidates should possess strong skills in Cybersecurity and Information Security, including security frameworks, risk management, and security governance.
• Candidates should possess skills in Network Security, including secure network design, firewalls, VPNs, IDS/IPS, and network monitoring tools.
• Candidates should possess skills in Application Security, including secure coding practices, code review, security testing (SAST/DAST), and integration of security in SDLC.
• Candidates should possess skills in Vulnerability Assessment, including vulnerability scanning, risk prioritization, remediation planning, and reporting.
• Relevant experience with security standards and regulations (e.g., ISO 27001, NIST, PCI-DSS, GDPR or similar) is beneficial.
• Proficiency with common security tools (e.g., SIEM, endpoint protection, web application firewalls, penetration testing tools) is preferred.
• Strong analytical and problem-solving abilities, with capacity to communicate complex security issues clearly to technical and non-technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced certifications such as CISSP, CISM, OSCP, CEH, or equivalent are a plus.
• Experience in a senior or lead security engineering role, mentoring teammates, and driving