Senior InfoSec Architect - Cloud, SIEM & DevSecOps

VaporVM; Lahore; On-site; PKR 9,000,000 - 15,000,000; Full time

Job summary

VaporVM in Pakistan seeks a Principal Information Security Engineer to lead design, implementation, and optimization of enterprise security solutions. The role emphasizes hands-on Microsoft security tech, SIEM engineering, DLP, PAM, cloud security, and secure SDLC integration.

You will drive vulnerability management, DevSecOps practices, and collaborate across Infrastructure, Cloud, Development, Compliance, and Business teams to strengthen security posture and support audits.

Qualifications

• 8–12+ years of information security engineering, cybersecurity, or security architecture experience.
• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, or related discipline.
• Strong technical leadership, analytical, problem-solving, and stakeholder management capabilities.

Responsibilities

• Design, implement, and optimize enterprise information security solutions and controls.
• Deploy and manage SIEM platforms (IBM QRadar, Microsoft Sentinel) including detection engineering and analytics.
• Implement and manage Microsoft Security solutions (Defender XDR, Intune, Purview, Entra ID).
• Lead DLP strategy: deployment, data classification, policy development, incident investigation, reporting.
• Manage privileged access, secure access, endpoint protection, and application security controls.
• Strengthen cloud security across Azure and AWS environments.
• Conduct vulnerability assessments, risk reviews, and remediation planning.
• Integrate security into CI/CD pipelines and promote secure SDLC/DevSecOps.
• Conduct security architecture reviews and infrastructure hardening.
• Collaborate with Infra, Cloud, Development, Compliance, and Business teams.
• Support audits, regulatory compliance, and vendor assessments.

Job description

VaporVM in Pakistan seeks a Principal Information Security Engineer to lead design, implementation, and optimization of enterprise security solutions. The role emphasizes hands-on Microsoft security tech, SIEM engineering, DLP, PAM, cloud security, and secure SDLC integration.

You will drive vulnerability management, DevSecOps practices, and collaborate across Infrastructure, Cloud, Development, Compliance, and Business teams to strengthen security posture and support audits.