Secop Engineer

NorthBay Solutions; Karachi Division; On-site; PKR 781,200 - 1,674,000; Full time

Job summary

NorthBay Solutions is seeking experienced professionals for L1, L2, and L3/L4 roles in IT security operations in Karachi Division, Pakistan. Responsibilities include managing firewall policies, performing alert monitoring, and generating accurate MIS reports.

Qualified candidates should possess a relevant degree, certifications, and extensive operational experience. The roles require 24x7 support coverage, excellent problem-solving skills, and strong communication abilities.

Qualifications

• L3/L4 – 10+ years of experience in IT security operations.
• L2 – 7-10 years of experience in IT security operations.
• L1 – Minimum of 3 years of experience in IT security operations.
• Relevant certifications such as CompTIA Security+, CheckPoint.

Responsibilities

• Manage firewall policy and ACL implementation.
• Conduct log monitoring and alert responses.
• Prepare and execute preventive maintenance activities.
• Produce and deliver accurate MIS reports.

Skills

IT security operations

Problem-solving

Analytical skills

Communication

Interpersonal skills

Education

Bachelor’s degree in computer science or related field

Tools

Check Point

Palo Alto

Trellix

McAfee

Job description

Objectives

The key objectives of this engagement are to:

• Augment Client’s Security Operations with experienced L1, L2, and L3/L4 resources
• Ensure uninterrupted 24x7 operational support for infrastructure security platforms
• Improve turnaround time for BAU security requests and operational tasks
• Support proactive security operations through structured preventive maintenance
• Ensure consistent MIS reporting and operational visibility
• Maintain strict adherence to Client’s governance, compliance, and ITSM processes

Scope of Services

Service Model & Coverage

• 24x7 operational coverage, including shift‑based coverage and on‑call support
• Resources will operate under client‑defined processes, tools, and controls
• Vendor will provide staffing, backfill, and continuity of service
• All operational priorities, approvals, and SLAs are governed by client

Team Composition (Total: 10 Resources)

• L1 Security Analyst – 3 – Triage and fulfill BAU tasks, ticket handling, basic troubleshooting, standard changes, log monitoring and reporting, documentation, and common mailbox monitoring.
• L2 Security Engineer – 5 – Advanced BAU, troubleshooting, complex changes, RCA, audit evidence, etc.
• L3/L4 Security Engineer – 2 – Engineering, hardening, architecture support, policy review/design, complex troubleshooting, DR support, governance inputs.

Note: Backfill must be provided for planned and unplanned leave to ensure uninterrupted coverage.

Roles & Responsibilities

Core BAU Security Operations

• Firewall policy and ACL implementation and troubleshooting
• WAF / IPS / Guardium Management
• VPN / MFA / token administration
• Website and proxy whitelisting
• Blocking indicators of compromise (IoCs)
• Endpoint security administration (AV, EDR, DLP)
• Security mailbox and queue monitoring
• Configuration management for in‑scope security technologies
• Support for audit, compliance, and evidence preparation
• Participation in disaster recovery drills and readiness activities
• Impact and root cause analysis
• Adherence to standards and changing management policies
• Audit, security and regulatory compliance knowledge
• Configuration management
• Supporting BAU tasks
• Daily backup & log monitoring
• DR activities support
• Preparing SOPs
• Firewall rule review & audit support
• Device baseline/hardening & vulnerability remediation coordination
• Adherence to ITSM processes (Incident, Change, Problem) & SLAs

MIS Reporting (Mandatory Responsibility)

The vendor is responsible for producing accurate, timely, and complete MIS reports, aligned to client formats and requirements. Reports include, but are not limited to:

• Ticket volumes and status
• BAU request metrics (ACLs, tokens, whitelisting, endpoint actions)
• Preventive maintenance execution status
• Risks, issues, and dependency tracking
• Operational trends and observations

Qualifications

• Education: Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• L3/L4 – 10+ years of experience in IT security operations.
• L2 – 7-10 years of experience in IT security operations.
• L1 – Minimum of 3 years of experience in IT security operations.
• Certifications: Relevant industry standard certifications such as CompTIA Security+, CheckPoint, Palo Alto, WAF, etc.
• Strong knowledge of IT security operations practices.
• Proficiency in security solutions mentioned in tech stack.
• Excellent problem‑solving and analytical skills.
• Strong communication and interpersonal skills.

Preventive Maintenance Responsibilities

Vendor resources shall execute preventive maintenance activities under client direction, with clear documentation and reporting.

Daily Activities

• Health checks for in‑scope security platforms
• Log and alert monitoring
• Backup verification checks
• Queue and mailbox monitoring
• Daily operational checklist updates

Weekly Activities

• Review of firewall rules and recent changes
• Patch and signature status validation
• Capacity and performance checks
• Weekly MIS and operational summary

Bi‑Weekly Activities

• Configuration drift checks
• Review of recurring incidents and BAU trends
• Validation of backup success and restore readiness

Monthly Activities

• Preventive maintenance execution report
• Firewall, endpoint, and security platform posture review
• SLA and operational metrics reporting
• Audit and compliance evidence preparation

Quarterly Activities

• Security posture and hardening progress review
• Firewall and policy optimization review
• Trend analysis and improvement recommendations
• Participation in quarterly governance reviews

Annual Activities

• Annual disaster recovery exercise support
• Annual backup and restore validation
• Security baseline and hardening review
• Support for internal and external audits

Technology Environment (Indicative)

• Firewalls: Check Point, Palo Alto, Fortinet
• Proxy / Web Security: Forcepoint, Zscaler
• WAF / IPS / Guardium / DDOS
• Endpoint Security: Trellix / McAfee, EDR, DLP
• IPS / NGFW platforms
• Identity & Access: MFA / VPN token solutions
• ITSM: BMC Helix (or equivalent)