Senior Cyber Security Engineer

PsychPlus; Pakistan; Sur place; PKR 1 800 000 - 2 400 000; Plein temps

Résumé du poste

PsychPlus is seeking a Senior Cyber Security Engineer to fortify cloud and application security, drive compliance, and automate security controls across our tech stack.

You will collaborate with Security Leadership, Product, and Engineering to secure cloud infrastructure, protect patient data, and improve security without slowing development velocity.

Qualifications

• 5+ years in cyber security engineering, DevSecOps, or product security.
• Hands-on experience with Microsoft Azure, Entra ID/Azure AD, Conditional Access, and Defender.
• Experience managing vulnerability scanners, interpreting findings, prioritizing risks, and driving remediation with Engineering teams.
• Strong understanding of CI/CD pipelines, containerization, DevSecOps, and secure SDLC.
• Experience integrating SAST/DAST/SCA into development pipelines.
• Knowledge of HIPAA/SOC 2 controls and implementing technical security controls.

Responsabilités

• Lead vulnerability identification, assessment, prioritization, and remediation across applications and cloud infrastructure.
• Collaborate with Product and Engineering to implement secure coding practices, conduct threat modeling, and establish application security requirements.
• Integrate and manage SAST, DAST, and SCA security tools within CI/CD pipelines.
• Secure the EHR platform and protect patient information.
• Configure Entra ID/Azure AD and Conditional Access policies.
• Deploy and monitor Defender across endpoints, cloud workloads, and infrastructure.
• Support SOC 2 and HIPAA compliance with required technical controls.
• Identify security gaps and coordinate audit remediation with Engineering teams.
• Assist with security incident investigations and threat response workflows.
• Develop security automation using PowerShell or Python.
• Advise leadership on technical risks, security improvements, and cloud governance initiatives.

Connaissances

DevSecOps

Application security

Cloud security

Threat modeling

Vulnerability management

Security automation

CI/CD security

SAST/DAST/SCA

PowerShell/Python scripting

English communication

Outils

SAST

DAST

SCA

Azure Defender

Azure AD/Entra ID

Conditional Access

CI/CD tooling

PowerShell

Python

Description du poste

PsychPlus is looking for a Senior Cyber Security Engineer to strengthen our cloud security, application security, and compliance initiatives.

You'll work closely with Security Leadership, Product, and Engineering teams to secure our cloud infrastructure, protect sensitive patient information, and build automated security controls across our technology ecosystem.

We're looking for a hands-on security engineer with strong expertise in Microsoft Azure, DevSecOps, vulnerability management, and security automation who can improve security without slowing down development.

What You'll Do

• Lead vulnerability identification, assessment, prioritization, and remediation across applications and cloud infrastructure.
• Partner with Product and Engineering teams to implement secure coding practices, conduct threat modeling, and establish application security requirements.
• Integrate and manage SAST, DAST, and SCA security tools within CI/CD pipelines.
• Secure PsychPlus's internal Electronic Health Record (EHR) platform and protect sensitive patient information.
• Configure, manage, and optimize Microsoft Entra ID (Azure AD), including Conditional Access policies.
• Deploy, configure, and monitor Microsoft Defender across endpoints, cloud workloads, and infrastructure.
• Strengthen cloud security controls and governance across our technology ecosystem.
• Support SOC 2 certification and HIPAA compliance by implementing and validating required technical controls.
• Identify security gaps, coordinate audit remediation, and verify corrective actions with Engineering teams.
• Assist with security incident investigations, alert triage, threat response, and improvements to incident response workflows.
• Develop security automation using PowerShell, Python, or similar scripting tools.
• Advise Security Leadership on technical risks, security improvements, and cloud governance initiatives.

What We're Looking For

• 5+ years of Cyber Security Engineering experience, particularly in DevSecOps, Application Security, or Product Security.
• Hands-on experience with Microsoft Azure, Microsoft Entra ID (Azure AD), Conditional Access policies, and Microsoft Defender.
• Proven experience managing vulnerability scanners, interpreting findings, prioritizing risks, and driving remediation with Engineering teams.
• Strong understanding of CI/CD pipelines, containerization, DevSecOps, and secure software development lifecycle (SDLC).
• Experience integrating security testing tools, including SAST, DAST, and SCA, into development pipelines.
• Strong understanding of HIPAA requirements and SOC 2 Trust Services Criteria, with experience implementing technical security controls.
• Ability to configure cloud security settings, troubleshoot technical issues, and implement security policies directly.
• Excellent spoken English and strong communication skills.
• Ability to collaborate effectively with Product, Engineering, and Security Leadership while balancing security requirements with development velocity.

Nice to Have

• Experience securing Electronic Health Record (EHR) systems or working in a regulated healthcare environment.
• Relevant certifications such as Microsoft AZ-500, CISSP, or CSSLP.
• Experience with security scripting and automation using PowerShell, Python, or similar tools.