Sr. Cyber Security Engineer

Vision Telecom (Pvt) Ltd; Lahore; On-site; PKR 1,800,000 - 3,600,000; Full time

Job summary

Vision Telecom (Pvt) Ltd in Lahore is seeking a Sr. Cyber Security Engineer with 5+ years of relevant experience to lead security initiatives across the organization.

You will focus on proactive threat detection, incident response, and security governance, aligning with regulatory requirements and industry best practices. The role includes risk assessments, penetration testing, security architecture design, SIEM operations, and continuous improvement.

Qualifications

• Bachelor’s degree in computer science, MIS, or Information Security or equivalent work experience.
• Minimum 5+ years of relevant work experience.
• Professional experience deploying and running penetration testing tools such as Metasploit, Burp Suite, Nessus, Nmap, Kali Linux, Wireshark, Hydra.
• Knowledge of privacy regulations and security frameworks SOC, CCPA, GDPR.
• Certifications CEH, GIAC, CISSP, CCSP preferred.

Responsibilities

• Ensure the effective functioning of Information Security & Governance and Security Operations Center.
• Supervise development and implementation of information security policies, guidelines and procedures.
• Oversee risk assessments, penetration testing, and vulnerability scanning; manage patching and PCI DSS compliance.
• Conduct security awareness training and ensure compliance with information security standards.
• Provide periodic updates to Senior Management and Boards on security initiatives and test results.

Skills

Penetration testing

Security operations

Incident response

Threat intelligence

Cybersecurity certifications

NIST/CIS

OWASP/SANS

Communication

Collaboration

Problem solving

Education

Bachelor's degree

Information Security or CS

Tools

Metasploit

Burp Suite

Nessus

Nmap

Kali Linux

Wireshark

Hydra

Job description

Sr. Cyber Security Engineer

Location: Lahore

Minimum Experience: At least 5 or more years of relevant work experience

Job Type: FULL TIME

Openings: 1

Education: Bachelor’s degree in computer science, MIS, or Information Security or equivalent work experience

Company Description

At Vision Telecom, we are pioneers in safeguarding digital landscapes against evolving cyber threats. Established with a vision to fortify the digital realm, we specialize in providing cutting-edge cybersecurity solutions tailored to meet the unique needs of modern enterprises. Our commitment to excellence, innovation, and reliability sets us apart in the rapidly evolving cybersecurity industry.

Job Description

With a focus on proactive threat detection, rapid incident response, and continuous improvement, we empower organizations to navigate the complexities of cyberspace with confidence. Our comprehensive suite of services encompasses risk assessments, penetration testing, security architecture design, incident management, and compliance consulting.

Key Responsibilities

• Ensuring effective functioning of the Information Security & Governance Division, as well as Security Operations Center. In line with best industry practices, meeting regulatory guidelines and internal policies.
• Supervise the development and implementation of information security policies, guidelines and procedures to ensure effective IT security across the Bank. Compliance of all IS related regulations.
• Ensuring implementation of information security awareness program.
• Ensuring compliance with the information security standards adopted by the Bank
• Supervise the periodic risk assessments, internal and external penetration testing as well as vulnerability scanning of the Bank’s information assets. Patch management etc. Compromise testing, PCI DSS etc.
• Be a part of all internal meeting suggesting controls etc for various projects.
• Ensure that the identified risks and vulnerabilities are appropriately mitigated through acceptable countermeasures.
• Supervise maintenance of the Security Information & Events Management (SIEM) solution. Building ability to counter any IS situation in minimum possible time
• Conduct training need assessment of the team members to keep them abreast with the latest standards and tools for effective information security.
• Recommend best tools, process, practices, and standards to ensure effective and efficient security tools/capabilities for investigations.
• To prepare and provide periodic update to Senior Management and Board Committees on the information security related initiatives as well as results of various tests and assessments
• Participating in the evaluation process of various IT projects.
• Any other assignment delegated by Chief Risk Officer.

Requirements

• Professional and strong experience deploying and running various penetration testing tools including Metasploit, Burp Suite, Nessus, Nmap, Kali Linux, Wireshark, Hydra to mention a few. As well as SAST, DAST, SCA scan tooling and reporting.
• Experience with cyber threat intelligence, security research, security operations, and/or incident response
• Security certifications CEH, GIAC, CISSP, CCSP and software application development experience a big plus
• Knowledge of privacy regulations and security frameworks SOC, CCPA, GDPR
• Solid understanding of the OSI Network model as well TCP/IP protocol stack
• Working knowledge of industry standards such as NIST and CIS
• Strong understanding of the OWASP and SANS models related to application threats and vulnerabilities
• Great communication skills both oral and written ensuring point gets across clearly
• A forensic approach to incidents and investigations including relevant tools and procedures
• Ability to work in a highly collaborative environment
• Self-starter and driven to get the job done
• Demonstrated effective organizational and technical skills
• Critical thinking skills, problem-solving aptitude
• Desire to self-educate on the ever-changing landscape of cyber hacking tactics

Benefits