Information Security Engineer

10-xer; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Professional development

Certification support

Collaborative culture

Access to modern security tools

Job summary

10-xer Information Security Engineer is sought to protect IT infrastructure, applications, networks, and sensitive data from threats. You will identify vulnerabilities, implement controls, monitor alerts, and ensure policy compliance.

Responsibilities include IAM/MFA support, patch management, risk assessments, and collaboration with developers and IT teams to address security issues while staying current with cyber threats.

Qualifications

• Bachelor's degree in CS, Software Engineering, Cybersecurity, IT, or related field.
• 1–3 years of information security experience.
• Solid networking fundamentals: TCP/IP, DNS, VPNs, firewalls.
• Experience with Windows and Linux security.
• Familiarity with vulnerability tools: Nessus, Nmap, Burp Suite, OWASP ZAP.
• Understanding of OWASP Top 10, phishing, malware, and unauthorized access.
• Knowledge of authentication, authorization, encryption, and access control.
• Familiarity with incident handling, log analysis, and remediation.
• Strong analytical and problem-solving skills.
• Good communication with technical teams.

Responsibilities

• Implement, maintain, and improve information security controls across systems, networks, applications, and infrastructure.
• Identify security vulnerabilities through assessments, reviews, and authorized testing.
• Monitor security alerts, investigate suspicious activities, and assist in incident response.
• Configure and maintain security tools, including firewalls, endpoint protection, antivirus, and IDS/IPS.
• Perform security assessments of applications, APIs, servers, and network infrastructure.
• Assist in IAM and MFA management and access controls.
• Support secure configurations, patch management, and remediation.
• Help develop and maintain information security policies and procedures.
• Support risk assessments, audits, and compliance requirements.
• Collaborate with developers and IT teams to address security issues.
• Promote security awareness and secure development practices.
• Stay updated on emerging cybersecurity threats and technologies.

Skills

Networking fundamentals

Windows security

Linux security

Threat monitoring

Incident response

Education

Bachelor's degree in CS/ Cybersecurity/ IT

Tools

Nessus

Nmap

Burp Suite

OWASP ZAP

Job description

Job Summary

We are looking for a skilled and motivated Information Security Engineer to protect the organization's IT infrastructure, applications, networks, and sensitive data from security threats. The ideal candidate will help identify vulnerabilities, implement security controls, monitor potential threats, and ensure compliance with information security policies and best practices.

Key Responsibilities

• Implement, maintain, and improve information security controls across systems, networks, applications, and infrastructure.
• Identify security vulnerabilities through vulnerability assessments, security reviews, and authorized penetration testing.
• Monitor security alerts, investigate suspicious activities, and assist in responding to security incidents.
• Configure and maintain security tools, including firewalls, endpoint protection, antivirus, and intrusion detection/prevention systems.
• Perform security assessments of applications, APIs, servers, and network infrastructure.
• Assist in access control management, identity and access management (IAM), and multi-factor authentication (MFA).
• Support secure system configurations, patch management, and vulnerability remediation.
• Help develop and maintain information security policies, procedures, and technical documentation.
• Support risk assessments, security audits, and compliance requirements.
• Collaborate with software developers, system administrators, and IT teams to address security issues.
• Promote security awareness and follow secure development and operational practices.
• Stay updated on emerging cybersecurity threats, vulnerabilities, and security technologies.

Required Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 1–3 years of relevant experience in information security, cybersecurity, IT security, or a related role.
• Understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls.
• Knowledge of operating system security, particularly Windows and Linux.
• Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
• Understanding of common security risks, including the OWASP Top 10, phishing, malware, and unauthorized access.
• Knowledge of authentication, authorization, encryption, and access control principles.
• Familiarity with security incident handling, log analysis, and vulnerability remediation.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication skills and the ability to work effectively with technical teams.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
• Familiarity with SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.
• Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• Experience with security automation or scripting using Python, PowerShell, or Bash.

What We Offer

• Competitive salary based on skills and experience.
• Opportunities for professional development and technical certifications.
• Exposure to modern security tools and technologies.
• Collaborative working environment.
• Opportunities to contribute to security improvements and risk reduction.