Cyber Security Engineer

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. SC Labs employs 700 people across engineering hubs in Lahore and three other locations, building ERP software for mid-market manufacturers. Laptops are MacBook Pros, and you pick your own editor.

Job summary:

We're looking for a Cyber Security Engineer to join our team. This is a remote role. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote within Pakistan. The team meets in Lahore once a quarter, travel covered. Good written English matters here, since most updates are written.

Duties:

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Respond to security incidents and lead the technical investigation
• Write secure coding guidelines and run developer training
• Review code and pull requests for security issues
• Automate security checks in CI/CD pipelines
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Coordinate external penetration tests and track remediation

Minimum qualifications:

• 2+ years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Preferred qualifications:

• IaC scanning with Checkov or tfsec
• Running a bug bounty program

Pay: PKR 220,000 to PKR 280,000 a month

What you get:

• Medical insurance
• Provident fund
• Paid leave
• Two bonuses a year

Candidates must be eligible to work in Pakistan.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at SC Labs.