Infrastructure Security Engineer, PAKISTAN

nsave; Lahore; Remote; PKR 15,239,000 - 22,858,000; Full time

Job summary

nsave is seeking a Security Engineer to own security end-to-end, from cloud hardening to driving formal compliance certifications. You will report to the CTO and shape the security posture for a regulated fintech platform operating from Pakistan with remote teams.

The role emphasizes hands-on security, threat modelling, and embedding security into the CI/CD pipeline, ensuring secure-by-default practices across infrastructure and endpoints.

Qualifications

• Hands-on AWS Organizations design and governance.
• Deep cloud network security experience (VPC, SGs, NACLs, private connectivity, WAF/DDoS).
• Infrastructure as code with Terraform; guardrails in CI/CD for secure defaults.
• Endpoint security for remote teams: EDR, MDM, patching and encryption.
• SOC experience: SIEM, monitoring, alerts, incident response.
• Compliance programs: PCI DSS, SOC 2, ISO 27001 knowledge.

Responsibilities

• Define, implement and continuously improve nsave's security posture across infra, apps and operations.
• Lead end-to-end security certifications (PCI DSS, SOC 2, ISO 27001) from gap analysis to audit.
• Harden cloud environment: design AWS Organization, least-privilege access, secure networking as code.
• Secure endpoints for a remote team: EDR, device mgmt, hardening standards.
• Embed security into engineering SDLC: reviews, threat modelling, secrets management, scanning.
• Manage risk and incidents: maintain risk register, lead incident response and post‑mortems.
• Assess third-party security and supply chain practices and ensure compliance.

Skills

AWS Organizations design

Cloud network security

Infrastructure as code

Endpoint security

SOC experience

Compliance programs

Terraform

Tools

Terraform

Job description

About nsave

nsave is a fintech company headquartered in London. Founded by Amer Baroudi and Abdallah AbuHashem, our vision is to "Protect and grow the wealth of the financially excluded". We have built a global platform that provides trusted USD accounts, global payments, and investments for individuals from distressed economies, where inflation is high and banking systems are unstable. Our compliance-by-design approach and proprietary technology allow us to deliver these services securely and at scale.

To date, nsave has raised $22M from leading investors including Sequoia Capital, TQ Ventures, Y Combinator, and SV Angel. Our team has grown 200% in the last year, and with so much more ahead, we're just getting started!

Learn more at www.nsave.com.

Location: Pakistan (Remote)

Engagement Type: Independent Contractor

About the Role

As our Security Engineer, you will own security at nsave end-to-end — from cloud infrastructure hardening to driving us through formal compliance certifications. Working closely with the CTO, you will be the person who ensures that the trust our customers place in us is backed by world‑class security practice. This is a foundational role: you'll set the bar for how we build, operate, and certify a regulated fintech platform at scale.

Who You Are

• Security engineer, not just an auditor: You can write policy and pass an audit, but you’re equally comfortable getting hands‑on in the infrastructure, identifying gaps, and fixing them.
• Fintech or regulated‑industry background: You have worked in fintech, banking, or payments — ideally in a regulated environment — and understand the unique risk, data privacy, and compliance obligations that come with it.
• Clear communicator: You can translate technical risk into plain language for non‑technical stakeholders, leadership, and external auditors.
• Proactive and ownership‑driven: You don’t wait to be told where the risks are — you go looking for them.

Must Have

• AWS Organizations design: Hands‑on experience designing and building an AWS Organization from the ground up — multi‑account structure, Organisational Units, Service Control Policies, and least‑privilege IAM across every account.
• Cloud network security: Deep experience securing cloud networks — VPC design and segmentation, security groups and NACLs, private connectivity, and WAF / DDoS protection.
• Infrastructure as code: Strong hands‑on Terraform experience — you define infrastructure and security controls as code, and build guardrails into CI / CD so the secure path is the default one.
• Endpoint security: Experience securing endpoints across a remote team — EDR, device management (MDM), hardening baselines, patching, and disk encryption.

Nice to Have

• Security operations (SOC): Experience setting up or working in a Security Operations Centre — SIEM, log monitoring, alerting, threat detection, and incident response.
• Compliance certifications: Experience taking a company through PCI DSS, SOC 2, or ISO 27001 — designing controls, gathering evidence, and working with auditors.

How You'll Make a Difference

• Own our security posture: Define, implement, and continuously improve nsave’s information security programme across infrastructure, application, and operational layers.
• Lead compliance certifications: Drive nsave through relevant security certifications (PCI DSS, SOC 2, ISO 27001), owning the end‑to‑end process from gap analysis through to audit and accreditation.
• Harden our cloud environment: Design and secure our AWS Organization and account structure — enforcing least‑privilege access, securing our cloud network, and managing it all as code in Terraform. (rewritten)
• Secure our endpoints: Own endpoint security across our remote team — device management, EDR, and hardening standards for every laptop that touches production. (new)
• Embed security into engineering: Partner with backend and platform engineers to build security into our SDLC — code reviews, threat modelling, secrets management, dependency scanning, and CI / CD pipeline security.
• Manage risk and incidents: Maintain our risk register, lead incident response when needed, and conduct post‑mortems that drive lasting improvements.
• Vendor and third‑party security: Assess the security posture of third‑party tools and partners, ensuring our supply chain meets the standards expected of a regulated financial platform.
• Build a security‑first culture: Run internal training, champion secure‑by‑default practices, and make security something the whole team owns.

nsave Values

• Service — "Mission First": We put the mission, our customers, and our team above self.
• Urgency — "Stay focused. Move fast": We act with urgency and intention, concentrating on what matters most.
• Ownership — "Act as an Owner": We take responsibility for outcomes end‑to‑end.
• Standards — "Pursue Excellence": We hold ourselves to high personal standards and continuously improve.

Please apply only if you:

• Are deeply motivated by nsave's mission and the problems we are solving
• Thrive in high‑ownership, high‑accountability environments
• Are comfortable operating with urgency and ambiguity
• Want to build from first principles in an early‑stage, high‑growth company

This role is offered on a freelance / independent contractor basis. Contractors are not employees of nsave and are responsible for their own taxes, insurance, and statutory obligations.

nsave is an equal opportunity organisation. We welcome applications from all backgrounds and do not discriminate on the basis of age, gender, ethnicity, religion, sexual orientation, disability, or any other protected characteristic.