Senior Security Engineer (Identity)

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. SC Labs employs 700 people across engineering hubs in Lahore and three other locations, building ERP software for mid-market manufacturers. Laptops are MacBook Pros, and you pick your own editor.

Role overview:

SC Labs is looking for a Senior Security Engineer (Identity) to join a small, steady team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. You can work from home anywhere in Pakistan. We have no office requirement. Flexible hours with a daily team call in the morning. You need a reliable internet connection and somewhere quiet to work.

In this role you will:

• Review code and pull requests for security issues.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Coordinate external penetration tests and track remediation.
• Respond to security incidents and lead the technical investigation.

Minimum qualifications:

• 5+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Good judgment on risk: knowing what to fix now and what can wait.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

PKR 250,000-PKR 330,000 pcm

Pay and benefits:

• Medical insurance.
• Provident fund.
• Paid leave.

We will only contact shortlisted applicants.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at SC Labs.