Junior Cyber Security Engineer

We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. Code review is required on every pull request, and nobody merges their own changes.

Position summary:

BHH Apps has an opening for a Junior Cyber Security Engineer. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. This is a full-time remote role. We use an employer of record in Pakistan, so you get a proper employment contract, not a freelance agreement. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. Please make sure you have dependable internet and backup power.

Your responsibilities:

• Own secrets management, key rotation and KMS policies.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Automate security checks in CI/CD pipelines.
• Write secure coding guidelines and run developer training.

Who you are:

• Good judgment on risk: knowing what to fix now and what can wait.
• Experience with SIEM, EDR or vulnerability management tools.
• Programming or scripting ability in Python, Go or similar.
• Ability to explain security issues to engineers without lecturing them.

Also helpful:

• Kubernetes and container security (Falco, OPA Gatekeeper)
• IaC scanning with Checkov or tfsec.

Perks and benefits:

PKR 350,000 to PKR 430,000 pcm

• Wellness allowance.
• 20 days paid time off.
• Paid sick days.
• Annual salary review.
• Annual team retreat.
• Company laptop.

Shortlisted candidates will hear from us within two weeks.

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at BHH Apps, LLC.