Senior Platform Consultant - (Security/Policy Engineer)

10Pearls; Lahore; On-site; PKR 1,116,000 - 1,674,000; Full time

Job summary

10Pearls in Lahore, Pakistan, is seeking a Security Engineer to enhance platform security through modern practices like policy-as-code, with a focus on Kubernetes security and ISO 27001 compliance. The role involves managing vulnerabilities, monitoring security, and collaborating with various teams. Candidates should have 3–6 years of experience in security roles, with skills in OPA, Kubernetes, and security documentation. The company values a strong, adaptive approach to problem-solving.

Qualifications

• 3–6 years of experience in Application Security or Security Engineering.
• Hands-on experience with OPA and Rego for policy management.
• Strong understanding of Kubernetes security features.

Responsibilities

• Implement and manage ISO 27001 security policies.
• Monitor network security and respond to incidents.
• Perform vulnerability assessments and penetration testing.

Skills

Application Security

Platform Security

Security Engineering

Kubernetes Security

Python

Go

Documentation Skills

Tools

OPA

Vault

Trivy

Snyk

Job description

Company Overview

10Pearls is an award-winning end-to-end digital innovation company that helps businesses imagine and build the future. We are proud to announce that 10Pearls was named as winner of the Best Tech Work Culture Timmy Award in Washington DC by Tech in Motion, recognized on the Inc. 5000 Fastest-Growing Companies List, and was ranked the #1 Most Diverse Midsize Company in Greater Washington. We partner with businesses to help them transform, scale, and accelerate by adopting digital and exponential technologies. Our work has ranged from creating highly usable, secure digital experiences, mobile and software products, to helping businesses modernize through cloud adoption and development and the digitalization of their business processes. Our clientele is highly diverse, including Global 1000 enterprises, mid-market businesses, and high-growth start-ups. But those are justfacts. What makes us unique is that we havetrueheart and soul. We have a strong focus on a double bottom line and actively support and engage with the communities where we live and work to make the world a better place.In a nutshell, we believe in doing well, while doing good, and know how to balance the two.

Role

10Pearls is looking for a Security Engineer to lead platform security through policy-as-code and modern security practices. You will drive Kubernetes security, supply chain protection, and compliance alignment. You will work with cross-functional teams to embed security across the development lifecycle.

Responsibilities

• Implement, manage ISO 27001, and update information security policies and procedures
• Monitor network and endpoint security, investigate issues, and respond to breaches
• Perform vulnerability assessments, identify security gaps in networks and websites, and conduct penetration testing
• Conduct internal audits and reporting related to ISO 27001 and technical compliance
• Manage Windows Server Security, PowerShell, and Linux system administration
• Ensure 100% deployment of endpoint security, email security, phishing, and malware protection
• Continuously audit systems to ensure implementation of approved security controls
• Coordinate with IT teams and other stakeholders
• Analyze IT requirements and provide objective security recommendations
• Lead tasks to completion and ensure timely execution of security operations
• Stay updated on the latest security threats, trends, and technologies
• Demonstrate adaptability and a creative approach to problem-solving
• Perform additional duties as assigned

Requirements

• 3–6 years of experience in Application Security, Platform Security, or Security Engineering roles
• Hands-on experience with OPA and Rego, including policy authoring, bundle distribution, and admission controller integration
• Strong understanding of Kubernetes security, including RBAC, Network Policies, Pod Security, and admission controllers
• Experience working with Vault, including policies, transit secrets engine, PKI, and dynamic secrets
• Hands-on experience with container and dependency scanning tools such as Trivy, Grype, Snyk, or Dependency-Track
• Knowledge of supply chain security, including image signing (Cosign or Sigstore) and SBOM generation
• Proficiency in Python and/or Go for building security tooling and automation
• Strong documentation and communication skills, including experience writing threat models, policy design documents, and incident reports

Nice to Have

• Experience with tamper-evident audit systems, WORM storage, or hash-chained architectures
• Familiarity with ABAC or ReBAC frameworks such as OPA, OpenFGA, or Cedar
• Experience with compliance frameworks such as ISO 27001, SOC 2, or regional sovereign frameworks (Pakistan, UAE, Saudi Arabia)
• Background in offensive security (penetration testing, red teaming, CTFs)
• Relevant certifications such as CISSP, OSCP, or CKS