Information Security Architect

VaporVM; Lahore; In loco; PKR 9.000.000 - 15.000.000; Tempo pieno

Descrizione del lavoro

VaporVM in Pakistan seeks a Principal Information Security Engineer to lead design, implementation, and optimization of enterprise security solutions. The role emphasizes hands-on Microsoft security tech, SIEM engineering, DLP, PAM, cloud security, and secure SDLC integration.

You will drive vulnerability management, DevSecOps practices, and collaborate across Infrastructure, Cloud, Development, Compliance, and Business teams to strengthen security posture and support audits.

Competenze

• 8–12+ years of information security engineering, cybersecurity, or security architecture experience.
• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, or related discipline.
• Strong technical leadership, analytical, problem-solving, and stakeholder management capabilities.

Mansioni

• Design, implement, and optimize enterprise information security solutions and controls.
• Deploy and manage SIEM platforms (IBM QRadar, Microsoft Sentinel) including detection engineering and analytics.
• Implement and manage Microsoft Security solutions (Defender XDR, Intune, Purview, Entra ID).
• Lead DLP strategy: deployment, data classification, policy development, incident investigation, reporting.
• Manage privileged access, secure access, endpoint protection, and application security controls.
• Strengthen cloud security across Azure and AWS environments.
• Conduct vulnerability assessments, risk reviews, and remediation planning.
• Integrate security into CI/CD pipelines and promote secure SDLC/DevSecOps.
• Conduct security architecture reviews and infrastructure hardening.
• Collaborate with Infra, Cloud, Development, Compliance, and Business teams.
• Support audits, regulatory compliance, and vendor assessments.

Descrizione del lavoro

Position Summary

We are seeking a highly experienced Principal Information Security Engineer to lead the design, implementation, and optimization of enterprise security solutions. The ideal candidate will have strong hands‑on expertise in Microsoft Security technologies, SIEM engineering, Data Loss Prevention (DLP), endpoint and cloud security, vulnerability management, and DevSecOps, with the ability to strengthen enterprise security architecture and protect critical information assets.

Key Responsibilities:

• Design, implement, and optimize enterprise information security solutions and technical controls.
• Deploy and manage SIEM platforms, including IBM QRadar and Microsoft Sentinel, covering log integration, detection engineering, analytics, and automation.
• Implement and manage Microsoft Security solutions, including Defender XDR, Microsoft Intune, Microsoft Purview, and Microsoft Entra ID.
• Lead DLP strategy, including solution deployment, data classification, policy development, incident investigation, and compliance reporting.
• Implement and maintain privileged access management, secure access, endpoint protection, and application security controls.
• Strengthen cloud security across Microsoft Azure and AWS environments.
• Conduct vulnerability assessments, security reviews, risk assessments, and remediation planning.
• Integrate security controls into CI/CD pipelines and promote secure SDLC and DevSecOps practices.
• Perform security architecture reviews, infrastructure hardening, and technical risk assessments.
• Lead technical security initiatives and collaborate with Infrastructure, Cloud, Development, Compliance, and Business teams.
• Support information security audits, regulatory compliance, vendor assessments, and continuous security improvement.

Technical Requirements:

• SIEM & Security Analytics: IBM QRadar, Microsoft Sentinel, log integration, KQL, detection engineering.
• Microsoft Security: Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Microsoft Intune, Microsoft Purview, and Entra ID.
• Data Protection: DLP architecture, policy administration, data classification, and Forcepoint DLP.
• Identity & Access Security: Privileged Access Management (PAM), IAM, and Active Directory security.
• Network & Application Security: WAF, secure access solutions, API security, and infrastructure hardening.
• Cloud Security: Microsoft Azure, AWS, cloud monitoring, workload protection, and security controls.
• Security Engineering: Vulnerability Management, VAPT, DevSecOps, CI/CD security, secure SDLC, and application security.

Preferred Product Expertise

Hands-on experience with one or more of the following enterprise security platforms:

• CyberArk PAM
• Zscaler ZIA / ZPA
• Imperva WAF
• Fortinet
• Forescout

Qualifications & Certifications:

• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, or a related discipline.
• 8–12+ years of relevant experience in Information Security Engineering, Cybersecurity, or Security Architecture.
• Proven experience implementing and managing enterprise security solutions.
• Strong technical leadership, analytical, problem-solving, and stakeholder management capabilities.

Preferred Certifications: CISSP, CISM, CEH, CHFI, Microsoft Security/Azure certifications, ISO 27001 Lead Implementer/Lead Auditor, and Forcepoint DLP or relevant vendor certifications.