Remote Fintech Infrastructure Security Engineer (Contractor)

Story Terrace Inc.; Lahore; Remote; PKR 15,239,000 - 22,858,000; Full time

Job summary

nsave is seeking a Security Engineer to own security end-to-end, from cloud hardening to driving formal compliance certifications. You will report to the CTO and shape the security posture for a regulated fintech platform operating from Pakistan with remote teams.

The role emphasizes hands-on security, threat modelling, and embedding security into the CI/CD pipeline, ensuring secure-by-default practices across infrastructure and endpoints.

Qualifications

• Hands-on AWS Organizations design and governance.
• Deep cloud network security experience (VPC, SGs, NACLs, private connectivity, WAF/DDoS).
• Infrastructure as code with Terraform; guardrails in CI/CD for secure defaults.
• Endpoint security for remote teams: EDR, MDM, patching and encryption.
• SOC experience: SIEM, monitoring, alerts, incident response.
• Compliance programs: PCI DSS, SOC 2, ISO 27001 knowledge.

Responsibilities

• Define, implement and continuously improve nsave's security posture across infra, apps and operations.
• Lead end-to-end security certifications (PCI DSS, SOC 2, ISO 27001) from gap analysis to audit.
• Harden cloud environment: design AWS Organization, least-privilege access, secure networking as code.
• Secure endpoints for a remote team: EDR, device mgmt, hardening standards.
• Embed security into engineering SDLC: reviews, threat modelling, secrets management, scanning.
• Manage risk and incidents: maintain risk register, lead incident response and post‑mortems.
• Assess third-party security and supply chain practices and ensure compliance.

Skills

AWS Organizations design

Cloud network security

Infrastructure as code

Endpoint security

SOC experience

Compliance programs

Terraform

Tools

Terraform

Job description

nsave is seeking a Security Engineer to own security end-to-end, from cloud hardening to driving formal compliance certifications. You will report to the CTO and shape the security posture for a regulated fintech platform operating from Pakistan with remote teams.

The role emphasizes hands-on security, threat modelling, and embedding security into the CI/CD pipeline, ensuring secure-by-default practices across infrastructure and endpoints.