Information Security Engineer

TEN-XER; Karachi Division; On-site; PKR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Exposure to modern security tools

Collaborative environment

Contribution to security improvements

Job summary

TEN-XER in Pakistan seeks an Information Security Engineer to safeguard IT infrastructure, apps, networks, and data. You will identify vulnerabilities, implement controls, monitor threats, and ensure policy compliance across environments.

Responsibilities include risk assessments, incident response support, configuring security tools, performing security assessments, and collaborating with developers and IT teams to embed secure practices.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/security.
• 1–3 years of information security experience.
• Familiarity with vulnerability assessment and security testing tools.
• Understanding of OWASP Top 10 and network security fundamentals.
• Experience with IAM, MFA, and access control concepts.

Responsibilities

• Implement, maintain and improve security controls across systems and networks.
• Identify vulnerabilities via assessments and authorized testing.
• Monitor security alerts and respond to incidents.
• Configure security tools: firewalls, EPP, AV, IDS/IPS.
• Assess applications, APIs, servers, and network infrastructure.
• Support IAM, MFA, and access control management.
• Assist patch management and remediation.
• Develop and maintain security policies and documentation.
• Support risk assessments, audits, and compliance.
• Collaborate with developers and IT teams to address issues.
• Promote secure development and ops practices.
• Stay updated on cyber threats and security tech.

Skills

Analytical thinking

Troubleshooting

Communication skills

Team collaboration

Education

Bachelor's degree in Computer Science, Cybersecurity or related field

Tools

Nessus

Nmap

Burp Suite

OWASP ZAP

SIEM (Microsoft Sentinel, Splunk, QRadar)

Linux security

Windows security

Job description

Job Summary

We are looking for a skilled and motivated Information Security Engineer to protect the organization's IT infrastructure, applications, networks, and sensitive data from security threats. The ideal candidate will help identify vulnerabilities, implement security controls, monitor potential threats, and ensure compliance with information security policies and best practices.

Key Responsibilities

• Implement, maintain, and improve information security controls across systems, networks, applications, and infrastructure.
• Identify security vulnerabilities through vulnerability assessments, security reviews, and authorized penetration testing.
• Monitor security alerts, investigate suspicious activities, and assist in responding to security incidents.
• Configure and maintain security tools, including firewalls, endpoint protection, antivirus, and intrusion detection/prevention systems.
• Perform security assessments of applications, APIs, servers, and network infrastructure.
• Assist in access control management, identity and access management (IAM), and multi-factor authentication (MFA).
• Support secure system configurations, patch management, and vulnerability remediation.
• Help develop and maintain information security policies, procedures, and technical documentation.
• Support risk assessments, security audits, and compliance requirements.
• Collaborate with software developers, system administrators, and IT teams to address security issues.
• Promote security awareness and follow secure development and operational practices.
• Stay updated on emerging cybersecurity threats, vulnerabilities, and security technologies.

Required Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 1–3 years of relevant experience in information security, cybersecurity, IT security, or a related role.
• Understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls.
• Knowledge of operating system security, particularly Windows and Linux.
• Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
• Understanding of common security risks, including the OWASP Top 10, phishing, malware, and unauthorized access.
• Knowledge of authentication, authorization, encryption, and access control principles.
• Familiarity with security incident handling, log analysis, and vulnerability remediation.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication skills and the ability to work effectively with technical teams.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
• Familiarity with SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.
• Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• Experience with security automation or scripting using Python, PowerShell, or Bash.

What We Offer

• Competitive salary based on skills and experience.
• Opportunities for professional development and technical certifications.
• Exposure to modern security tools and technologies.
• Collaborative working environment.
• Opportunities to contribute to security improvements and risk reduction.