Senior Security Engineer — Incident Response & Threat Defense

GXA; Pakistan; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

GXA is seeking a Security Engineer in Pakistan to deliver and operate the gShield security services. This hands-on role focuses on security engineering, incident response, security tool operations, remediation execution, client security support, infrastructure security, and internal improvement initiatives.

The engineer serves as a Tier 3 escalation point and works with the InfoSec Manager, SOC, onboarding teams, and technical leadership to strengthen client security posture and respond rapidly

Qualifications

• Hands-on security engineering experience across security operations, incident response and remediation.
• Ability to troubleshoot across identity, endpoints, servers, networking, and cloud services.

Responsibilities

• Serve as a Tier 3 escalation point for active security incidents, including BEC, AiTM, ransomware, and identity-based attacks.
• Lead technical analysis during incident response and war room events with log review and attacker activity analysis.
• Execute containment and eradication actions such as endpoint isolation and credential resets.
• Troubleshoot incidents spanning multiple layers to distinguish security events from infrastructure issues.
• Coordinate with SOC, infrastructure, and vendor threat intelligence teams during investigations.
• Maintain calm, methodical handling of high-impact incidents and communicate status clearly.
• Produce incident timelines, technical findings, and evidence packages for vCISO review and client follow-up.
• Operate daily within the gShield toolstack and perform alert triage and rule tuning.

Skills

Security engineering

Incident response

Network engineering

Troubleshooting

Communication skills

Tools

Huntress

Microsoft Defender for Endpoint

DNSFilter

SIEM

Endpoint security

Job description

GXA is seeking a Security Engineer in Pakistan to deliver and operate the gShield security services. This hands-on role focuses on security engineering, incident response, security tool operations, remediation execution, client security support, infrastructure security, and internal improvement initiatives.

The engineer serves as a Tier 3 escalation point and works with the InfoSec Manager, SOC, onboarding teams, and technical leadership to strengthen client security posture and respond rapidly