Security Engineer

ABOUT US

Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. Nobody gets in trouble for clicking a test phish. You report it and move on.

THE ROLE

This is a backfill for a team member who moved to another team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Remote position. Most of the team is in Islamabad, but nobody is required to come in. Normal business hours, Monday to Friday, with some flexibility. A stable internet connection and a backup power option are required.

WHAT YOU'LL DO

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Own secrets management, key rotation and KMS policies.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Triage bug bounty reports from HackerOne or Bugcrowd.

WHAT WE'RE LOOKING FOR

• 3+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

ALSO HELPFUL

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background.

WHAT YOU GET

PKR 195,000 - PKR 240,000 pcm

• Medical insurance.
• Provident fund.
• Paid leave.
• Two bonuses a year.
• Fuel allowance.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Crescent Cyber.