Networks And Systems Security Engineer

TXT Solutions Pvt. Ltd.; Lahore; On-site; PKR 600,000 - 1,200,000; Full time

Job summary

A leading technology solutions firm in Lahore is seeking an Information Security specialist to monitor client networks and manage risk assessments. The ideal candidate will have 1-4 years of experience in security-sensitive environments and knowledge of compliance standards like HIPAA and PCI-DSS. This role involves using automated tools for security scanning, responding to incidents, and promoting security awareness within the organization.

Qualifications

• 1-4 years progressive experience in Information Security.
• Experience managing security-sensitive environments maintaining compliance with regulations.
• Strong understanding of cybersecurity tools and practices.

Responsibilities

• Monitor networks for security events and investigate suspicious activity.
• Execute application and vulnerability scans monthly.
• Review system logs and vendor patches for security risks.

Skills

Information Security

Risk Management

Incident Management

Compliance Testing

Security Awareness

Education

Bachelor's degree in computer science

Tools

JIRA

Palo Alto firewalls

Job description

1. Monitor global client's network for security events and investigate any suspicious activity.

2. Provides technical expertise and support in risk assessments.

3. Execute application and vulnerability scans monthly.

4. Assist with vulnerability and penetration mitigation.

5. Performs access control and account administration audits quarterly.

6. Review system logs using provided tools and alerts to identify security risks and anomalous activity. Determine and ensure appropriate steps are taken.

7. Review vendor patches and solutions to determine appropriateness of implementation.

8. Use automated tools for security scanning of our application source code to find security weaknesses and code flaws.

9. Help with the development of communications and related campaigns for information security awareness among all staff.

10. Assist with any incidents flowing our existing process

11. Performs related duties as assigned or requested by leadership

Job Specification

Required Qualification:

1-4 years progressive experience in Information Security.

2-4 years experience in the management of large-scale information systems in security sensitive environments that need to maintain compliance with corporate governance regulations and security standards (i.e. COBIT, ITIL Sarbanes-Oxley, HIPAA, PCI-DSS, PA-DSS, SOC1, SSAE-16, ISAE3402, SOC2, SOC3, ISO27001)

Strong working knowledge of JIRA.

Strong understanding of IDS/IPS devices.

Willingness to become SME's of the client's network toolsets.

Experienced with Security Incidence response and Incident Management.

Preferred Qualifications

An Excellent team player

Support continuous improvement by investigating alternatives and technologies and perusing these from initiation to its rollout.

Preferred Qualifications:

Bachelor's degree in computer science, Information Systems, or related discipline.

Working knowledge of Palo Alto firewalls

Experience should include security awareness training, network and application penetration testing, application vulnerability assessments, log and alert analysis, risk analysis, and compliance testing.

Experience with IT Risk Assessment Methodologies and Risk Management Frameworks

Information Technology and Services - Lahore, Pakistan