Security Engineer — Build From Scratch & Own Security

Flox; Pakistan; Hybrid; PKR 2,000,000 - 3,500,000; Full time

Benefits offered by this job

Competitive salary

Equity

Flexible hybrid environment

Job summary

Flox is seeking its first dedicated security engineer to work with engineering leadership to build pragmatic security practices. You’ll deploy tools, configure controls, harden infrastructure, and close gaps, not just advise.

You’ll influence security priorities and roadmap as the product sits at the heart of the software supply chain, influencing dependencies, environments, and build artifacts for major engineering teams.

Qualifications

• 3–5 years of hands‑on security engineering experience.
• Demonstrated track record of implementing security tools and controls.
• Solid working knowledge of AWS security services (IAM, SCPs, GuardDuty, Security Hub).
• Hands‑on experience with Cloudflare - WAF, Zero Trust, DLP.
• Experience deploying and managing endpoint protection across dev and production.
• Familiarity with software supply chain concepts: SBOMs, dependency management, artifact signing (SLSA).
• Experience integrating SAST/SCA/DAST tools into CI/CD pipelines.
• Comfort with scripting or light automation (Python, Bash).
• Ability to work independently and prioritize ruthlessly.

Responsibilities

• Evaluate SIEM options and deploy or manage SOC integration.
• Build incident response runbooks and test backups.
• Harden AWS posture and maintain GuardDuty, Security Hub configurations.
• Manage Cloudflare WAF, DDoS protection, Zero Trust, and DLP policies.
• Implement IaC security scanning in CI/CD (Checkov, tfsec).
• Own CSPM tooling and triage security findings.
• Deploy and manage endpoint protection across developer and production environments.
• Secure our build and release pipelines and promote supply chain integrity.

Skills

AWS security

Cloudflare

SIEM experience

Endpoint protection

Scripting

SBOMs/SLSA

CI/CD integration

Threat modeling

Least privilege

Identity governance

Tools

Semgrep

Snyk

GitHub Security

Checkov

tfsec

GuardDuty

Security Hub

CloudTrail

Job description

Flox is seeking its first dedicated security engineer to work with engineering leadership to build pragmatic security practices. You’ll deploy tools, configure controls, harden infrastructure, and close gaps, not just advise.

You’ll influence security priorities and roadmap as the product sits at the heart of the software supply chain, influencing dependencies, environments, and build artifacts for major engineering teams.