devops engineer

software engineer

it support engineer

qa automation engineer

sales engineer

cloud security engineer

MOBIZ

<div><p><b>About Mobiz</b></p>
<p>
Mobiz is an information technology firm, and we do three things exceptionally well: cloud and network automation, digital transformation, and data protection. Double-digit growth year-over-year has driven us to grow our team and ensure we stay ahead of the curve.<br>
</p><p></p><br>
<p><b>What Can You Expect?</b></p>
<p>
Every day at Mobiz, we work with a deep sense of purpose. We continuously innovate. Our mission is to empower our clients to do more through transformation. You&rsquo;ll work in a collaborative environment alongside highly talented people that improve client operations and exceed expectations. We strive to simplify technology challenges, and no less.</p><br>
<p></p>
<p><b>
Who Are We Looking For?
</b></p><p>We are seeking a highly skilled Security Engineer with 3&ndash;5 years of hands-on experience designing and deploying enterprise security solutions across Microsoft Azure and Microsoft 365.</p>
<p>
The ideal candidate will possess strong proficiency in implementing security controls that align with leading frameworks such as NIST, CIS, and ISO/IEC 27001, while demonstrating expertise in applying Microsoft&rsquo;s Azure Security Benchmark (ASB) to real-world customer environments.</p>
<p>
The Security Engineer will take ownership of ground-level security execution, ensuring that customer environments are not only technically hardened but also fully aligned with compliance and governance best practices. This role requires a blend of hands-on technical capability and a deep understanding of how security frameworks translate into operational guardrails within Azure and Microsoft 365.</p><br>
<p></p>
<p><b>
Key Responsibilities</b></p>
<ul>
<li>Must have deployed and configured security solutions in Azure, including Microsoft Defender for Cloud, Identity Protection, Privileged Identity Management (PIM), and Conditional Access policies.</li>
<li>Must Have Implemented and managed Microsoft 365 security features such as Defender for Microsoft 365, Defender for Identity, and Defender for Endpoint, XDR,.</li>
<li>Must have configured and operationalized Microsoft Sentinel, including rule creation, incident response playbooks, and security automation.</li>
<li>Good to have support Microsoft Purview deployments including sensitivity labels, Data Loss Prevention (DLP), Insider Risk, and eDiscovery (good to have).</li>
<li>Must Have Conduct security hardening of Azure and Microsoft 365 environments, aligning with Zero Trust principles and industry frameworks.</li>
<li>Must have performed security monitoring, log analysis, and incident response across Azure and M365 platforms.</li>
<li>Collaborate with architects and senior security leaders to execute customer-facing engagements and deliver high-quality technical outcomes.</li>
<li>Document security designs, configurations, and remediation actions for both internal and external stakeholders.</li></ul><br>
<p></p>
<p><b>
Required Qualifications</b></p>
<ul>
<li>3&ndash;5 years of professional experience in Microsoft cloud security engineering roles.</li>
<li>Proven hands-on experience deploying and managing Azure and M365 security solutions.</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500) &ndash; mandatory.</li>
<li>One of the following certification (SC-200, SC-300, or SC-400) &ndash; mandatory.</li>
<li>Experience with Microsoft Purview Information Protection and compliance solutions &ndash; preferred.</li>
<li>Strong working knowledge of Zero Trust, cloud governance, and regulatory compliance frameworks (ISO, NIST, CIS, etc.)</li>
<li>Excellent problem-solving skills, attention to detail, and ability to work in a fast-paced consulting environment.</li></ul><br>
<p></p>
<p><b>
What We Offer</b></p>
<ul>
<li>A team of bright, hard-working, and innovative people that will contribute to your growth.</li>
<li>Competitive Salary and comprehensive benefits plan.</li>
<li>A dynamic and collaborative work environment with opportunity to work with cutting-edge technology and innovative solutions.</li></ul><br>
<p></p>
<p><b>
Other</b><br>
This is a full-time office-based job in Karachi, Pakistan.</p><p></p><p><b><br>
Closing
</b></p><p>Mobiz embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better we are. We are an equal opportunity employer.</p>
<p>
We thank all applicants for their interest. We will contact you if you are selected to move forward in the recruiting process.</p></div>

Cloud Security Engineer

DM Clinical Research

<div><p>As a <b>DevSecOps Engineer</b> with expertise in Microsoft technology stack, you will work towards enhancing our security posture, integrate security practices into DevOps pipelines, and ensure compliance with industry security standards. This role requires a strong background in Azure DevOps, security automation, and cloud security best practices.</p><p>
</p><p></p><p><b>DUTIES &amp; RESPONSIBILITIES</b></p><ul><li>
Design, implement, and manage CI/CD pipelines using tools like Azure DevOps, or GitLab CI/CD.</li><li>
Implement security best practices in Azure DevOps, GitHub Actions, or other CI/CD pipelines.</li><li>
Automate build, test, and deployment processes to ensure fast and reliable releases.</li><li>
Deploy and manage cloud-based solutions in Azure, or Google Cloud (GCP).</li><li>
Optimize cloud resource utilization, security, and cost management.</li><li>
Work with Docker and Kubernetes (EKS, AKS, GKE) to deploy and manage microservices.</li><li>
Maintain high availability, scalability, and performance of production systems.</li><li>
Monitor and respond to security threats using Microsoft Sentinel (SIEM) and Defender for Endpoint.</li><li>
Ensure proper IAM (Identity &amp; Access Management) and RBAC (Role-Based Access Control) policies in Azure AD.</li><li>
Apply Zero Trust principles and security monitoring across Azure workloads.</li><li>
Design and implement secure cloud architectures using Azure security services (e.g., Azure Security Center, Key Vault, Defender for Cloud).</li><li>
Work closely with developers, QA teams, and security engineers to improve software development workflows.</li><li>
Promote GitOps and automation-first culture to enhance operational efficiency.</li><li>
Document processes, conduct training, and drive best practices within the team.</li></ul><p>
</p><p><b>KNOWLEDGE &amp; EXPERIENCE</b></p><p><b>
Education:</b></p><ul><li>
Bachelors degree with Software engineering, IT or similar degree or relevant experience</li></ul><p><b>
Experience:</b></p><ul><li>
4 to 5 years of experience in DevOps, Cloud Security, ,Cloud Engineering, or Site Reliability Engineering (SRE)</li><li>
Hands-on experience with Azure cloud platform.</li><li>
Experience with security best practices in cloud and DevOps environments.</li></ul><p><b>
Credentials:</b></p><ul><li>
Azure DevOps Expert (preferred)</li><li>
Microsoft security certifications (e.g., AZ-500, SC-200, SC-300, SC-100)</li></ul><p><b>
Knowledge and Skills:</b></p><ul><li>
Strong expertise in CI/CD tools using Azure DevOps.</li><li>
Proficiency in Linux administration and scripting (Bash, Python, PowerShell).</li><li>
Proficiency in PowerShell, Python, or Bash for security automation.</li><li>
Hands-on experience with Azure security services like Defender for Cloud, Sentinel, Security Center, Key Vault, and Azure AD.</li><li>
Familiarity with monitoring &amp; logging tools like Prometheus, Grafana, ELK, Datadog.</li><li>
Knowledge of OWASP Top 10, NIST, CIS benchmarks, and Secure SDLC principles.</li></ul></div>

DevSecOps Engineer

Hire My Tech

<div><p>We are seeking an experienced <b>System Security Engineer</b>to design, implement, and manage secure systems and infrastructure across complex environments. The ideal candidate will bring expertise in <b>system hardening, vulnerability management, cloud security, and DevSecOps principles</b>while ensuring compliance with Federal, DoD, and Intelligence Community (IC) security requirements.</p><p><b>
Primary Duties &amp; Responsibilities</b></p><ul>
<li>Define system security requirements, including authorization boundaries, security domains, and data classifications.</li>
<li>Design security interfaces, interconnections, and trust relationships between system components and external systems.</li>
<li>Implement secure system architectures using <b>COTS, GOTS, and open-source technologies</b>.</li>
<li>Oversee hardening and configuration of systems and components per Federal, DoD, and IC guidance.</li>
<li>Manage security assessments using automated tools (e.g., <b>Tenable Nessus, SCAP</b>).</li>
<li>Coordinate vulnerability assessments, identify control failures, and recommend corrective actions.</li>
<li>Support <b>business continuity and disaster recovery (BC/DR)</b> strategies.</li>
<li>Administer servers, backups, monitoring tools, and multi-network environments.</li>
<li>Contribute to CI/CD pipelines, automation, and infrastructure security improvements.</li></ul><p><b>
Desired Skills &amp; Requirements</b></p><ul>
<li>Strong knowledge of <b>DevSecOps principles</b> with the ability to advise cross-functional teams and simplify technical communication.</li>
<li>Hands-on experience with <b>Red Hat Enterprise Linux (RHEL), Windows administration, OpenShift, and Kubernetes</b>.</li>
<li>Certification or proven experience as <b>Red Hat OpenShift Administrator</b>.</li>
<li>Cloud expertise with <b>AWS (Cloud Practitioner), Azure (Solutions Architect/DevOps Engineer)</b>.</li>
<li>2+ years configuring/managing <b>F5 Firewall infrastructure</b> in enterprise environments.</li>
<li>Experience managing web server architectures (e.g., <b>Apache Tomcat on RHEL</b>).</li>
<li>Familiarity with CI/CD and development tools: <b>GIT, Helm, Fortify, SonarQube, Chef, Docker, OpenShift, Kubernetes, OKTA, F5 APM, ADFS</b>.</li>
<li>Experience with <b>middleware technologies</b> (RabbitMQ, Java, .NET runtime).</li>
<li>Knowledge of web technologies: <b>HTML4/5, XML, SOAPUI</b>.</li>
<li>Proficiency with network analysis tools: <b>Splunk, Wireshark, SD Elements, Sniffer, MS Network Monitor</b>.</li>
<li>Cybersecurity certifications preferred: <b>CCSP, CISSP</b>.</li>
<li>Strong scripting skills (e.g., <b>PowerShell</b>) for automation, cloud management, and CI/CD pipelines.</li></ul><p><b>
Qualifications</b></p><ul>
<li>Bachelors degree in Computer Science, Cybersecurity, or related field (or equivalent experience).</li>
<li>Minimum <b>5+ years of IT/system security experience</b> with increasing responsibility.</li>
<li>Proven track record of <b>designing, securing, and supporting enterprise-level systems</b>.</li></ul></div>

RedHat Dev SecOps Engineer

Contour Software

<div><div>About Contour</div><div></div><div><div>
Contour Software</div> has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.</div><div><br>
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.</div><div><br>
What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!</div><div></div><div>
About the Role:</div><div><div>
Constellation Payment</div> Processing is a modern Payment Facilitator (PayFac) empowering SaaS businesses to grow revenue through seamless, embedded payments. As part of Constellation Software Inc. (TSE:CSU) &mdash; a global Canadian-based software leader at a $96B market cap and the 7th largest software company in the world &mdash; we combine the agility of a specialized payments company with the strength and stability of an established global powerhouse.</div><div>
We&rsquo;re building a cloud-native PayFac platform on AWS: microservices (DDD) across TypeScript/JavaScript, Java, and Ruby, with a ReactJS front end. As our Security Engineer, you&rsquo;ll co-own the DevSecOps program&mdash;driving continuous security automation, compliance automation, and penetration testing. You&rsquo;ll design and orchestrate SAST/SCA/DAST across our services, champion remediation practices, and partner closely with our compliance team to translate control objectives into repeatable, automated evidence.</div><div></div><div>
Our customers are ISV vendors who embed payments by integrating with our APIs, SDKs, and webhooks. That means security and compliance aren&rsquo;t afterthoughts&mdash;they&rsquo;re product features. You&rsquo;ll ensure our developer-facing surface area is secure by default: establishing standards for authentication and authorization (OIDC/OAuth2/JWT, mTLS/JWS for webhooks), key and secret management, request signing, idempotency, rate-limiting/abuse controls, and secure data handling that minimizes PCI scope for ISVs (tokenization, hosted fields/iframes, PAN vault boundaries, network tokens). You&rsquo;ll create secure integration patterns (reference apps, checklists, threat models/DFDs) so partners can implement quickly without compromising controls.</div><div></div><div>
Because we operate a multi-tenant PayFac, you&rsquo;ll harden isolation boundaries (network, identity, and data), lead supply-chain security (SBOMs, signing/provenance, gated deployments), and build continuous evidence for PCI DSS 4.0 (and SOC 2/ISO as needed). You&rsquo;ll collaborate with partner security and compliance teams on due-diligence requests (SIG Lite, AOC/ROCs, shared-responsibility matrices), and you&rsquo;ll own pre-launch security reviews for new ISV integrations. You&rsquo;ll also help run incident response drills and define partner-facing comms and SLAs for security events.</div><div></div><div>
Finally, you&rsquo;ll research and implement AI-assisted security (triage, anomaly detection, auto-remediation PRs) with appropriate guardrails, and own KPIs that demonstrate multiplier effects&mdash;e.g., reduced MTTR, lower false-positive rates, higher auto-triage coverage, and faster time-to-evidence&mdash;so our platform&rsquo;s security posture continuously improves as our ISV ecosystem scales.</div><div></div><div>
What You&rsquo;ll Do:</div><div></div><div>
Own Security Automation:</div><ul><li><div>
Design, implement, and run the CI/CD security toolchain: SAST, SCA, DAST, container and IaC scanning, secrets detection, SBOM generation, and policy-as-code.</div></li><li><div>
Integrate scanners into GitHub/GitHub Actions pipelines with PR gates, and auto-ticketing to JIRA; tune noise, baselines, and break-glass rules.</div></li><li><div>
Establish vulnerability management SLAs, risk acceptance workflow, and metrics dashboards (e.g., MTTR, vuln burn-down).</div></li></ul><div></div><div>
Embed Security in the SDLC:</div><ul><li><div>
Create lightweight secure-coding standards and review checklists for TypeScript/Node, Java, Ruby, React.</div></li><li><div>
Run threat modeling (STRIDE/PASTA) and produce DFDs (L0&ndash;L2) for new and high-risk flows.</div></li><li><div>
Lead a &ldquo;security champions&rdquo; program with engineering squads.</div></li></ul><div></div><div>
Platform &amp; Cloud Security (AWS/EKS):</div><ul><li><div>
Harden EKS workloads (admission controls, pod security, image signing, runtime protection), ECR scanning, and supply-chain security.</div></li><li><div>
Implement and iterate on IAM least-privilege, KMS/CloudHSM key management, network segmentation, WAF/Shield, CloudFront, GuardDuty/Security Hub, and centralized logging.</div></li><li><div>
Validate service-to-service auth (mTLS, OIDC, JWT), secrets management (AWS Secrets Manager/SSM), and data protection at rest/in transit (FIPSvalidated crypto).</div></li><li><div>
Manage security certificate adoption our own and 3rd party across the company technology stack</div></li></ul><div></div><div>
Compliance Automation:</div><ul><li><div>
Map controls and automate evidence for PCI DSS 4.0 (and SOC 2/ISO 27001 as needed): continuous monitoring, detector-to-control mappings, and audit-ready artifacts.</div></li><li><div>
Partner with compliance on policies, risk register, third-party/vendor assessments, and control testing cadence.</div></li></ul><div></div><div>
Penetration Testing &amp; Response:</div><ul><li><div>
Scope and coordinate internal and third-party penetration tests (API, web, mobile, cloud); plan fix-verification and retests.</div></li><li><div>
Contribute to incident response playbooks, tabletop exercises, and forensics runbooks.</div></li><li><div>
Participate in incident response events and be a key contributor on improving security posture</div></li></ul><div></div><div>
Research &amp; implement AI security tools:</div><ul><li><div>
Evaluate and deploy AI/ML capabilities (LLM-assisted code reviews, AI triage for SAST/SCA/DAST, anomaly detection over logs/telemetry, drift detection) to reduce toil and increase signal quality&mdash;without leaking sensitive code or data.</div></li></ul><div></div><div>
Own outcomes &amp; KPIs:</div><ul><li><div>
Define baselines, instrument dashboards, and continuously tune models/policies to demonstrably improve detection efficacy, remediation speed, and compliance evidence quality.</div></li></ul><div></div><div>
Guardrails &amp; governance:</div><ul><li><div>
Establish safe-use patterns (PII redaction, repository allowlists, prompt/content controls, human-in-the-loop), document model/feature risks, and keep audit trails that map to PCI DSS 4.0 controls.</div></li></ul><div></div><div>
Automation &amp; SOAR integration:</div><ul><li><div>
Orchestrate AI-assisted enrichment and response (e.g., auto-labeling, deduplication, prioritization, suggested fixes/PRs) across CI/CD, SIEM, ticketing, and chat.</div></li></ul><div></div><div>
KPIs You&rsquo;ll Own:</div><ul><li><div>
MTTR for high-severity vulns/incidents: 40&ndash;60% vs. baseline within 2&ndash;3 quarters.</div></li><li><div>
Alert noise reduction (precision/FP rate): 50% reduction in false positives on gated scans and detections.</div></li><li><div>
Auto-triage coverage: 70% of scanner findings enriched and prioritized by AI with reviewer acceptance 90%.</div></li><li><div>
AI-generated remediation PRs: 30% of low/medium issues fixed via assisted PRs passing CI policy.</div></li><li><div>
Time-to-evidence (PCI 4.0 controls): 50% for recurring audits via automated control artifacts.</div></li><li><div>
Signed-off service coverage: 90% of services covered by AI-backed detections and scan triage.</div></li></ul><div></div><div>
What You&rsquo;ll Bring:</div><ul><li><div>
8&ndash;10 years in application/cloud security or DevSecOps for high-availability platforms (fintech/payments ideal).</div></li><li><div>
Hands-on DevSecOps program administration experience with Veracode.</div></li><li><div>
Fluent in Terraform for the AWS Stack</div></li><li><div>
Strong CI/CD experience (GitHub Actions preferred) and automation in Python/TypeScript/Bash.</div></li><li><div>
Solid AWS security fundamentals: IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, VPC/LBs, WAF/Shield; Kubernetes/EKS hardening experience.</div></li><li><div>
Familiarity with microservices, event-driven systems, and DDD; ability to read code in TypeScript/Java/Ruby and basic ReactJS patterns.</div></li><li><div>
Working knowledge of PCI DSS 4.0 control objectives (tokenization/PAN handling, key management, segmentation, logging/retention), plus SOC 2/ISO 27001 concepts.</div></li><li><div>
Clear communication with engineers and non-technical stakeholders; bias to automate and simplify.</div></li><li><div>
Bonus Point: Payments domain exposure: EMV/3DS, PAN vaulting, network tokenization, P2PE, dispute/chargeback flows.</div></li></ul><div></div><div>
How We&rsquo;ll Measure Success:</div><ul><li><div>
90 days: Security scans embedded in CI for core services with actionable findings; baseline metrics and SLAs defined; initial PCI 4.0 control mappings complete.</div></li><li><div>
6 months: False-positive rate &lt;10% on gating scans; P1/P2 MTTR within SLA; SBOMs &amp; dependency policies enforced; security champions running.</div></li><li><div>
12 months: Compliance evidence automation covers priority controls; successful third-party penetration test with timely remediation; measurable reduction in highrisk vulns and misconfigurations.</div></li></ul><div></div><div>
Team &amp; Reporting:</div><div></div><div>
This role sits in the CTO organization (Engineering/Platform) and partners daily with compliance, DevOps/SRE, Backend/Frontend teams, and Product.</div><div></div><div>
Our Stack (you don&rsquo;t need all of these):</div><div></div><div>
AWS (EKS, ECR, KMS, CloudHSM, WAF/Shield, CloudFront, GuardDuty, Security Hub,</div><div>
CloudWatch), GitHub/GitHub Actions, Terraform, Node/TypeScript, Java, Ruby, React,</div><div>
Kafka, MongoDB, Postgres, Redis, Veracode, OWASP ZAP/Burp, AI Tools in Microsoft Teams, JIRA, Development IDEs (Amazon Q, Cursor, Claude Code)</div><div>
Exciting Benefits we offer:</div><ul><li><div>
Market-leading Salary</div></li><li><div>
Medical Coverage &ndash; Self &amp; Dependents</div></li><li><div>
Parents Medical Coverage</div></li><li><div>
Provident Fund</div></li><li><div>
Employee Performance-based bonuses</div></li><li><div>
Home Internet Subsidy</div></li><li><div>
Conveyance Allowance</div></li><li><div>
Profit Sharing Plan [Tenured Employees Only]</div></li><li><div>
Life Benefit</div></li><li><div>
Child Care Facility</div></li><li><div>
Company Provided Lunch/Dinner</div></li><li><div>
Professional Development Budget</div></li><li><div>
Recreational area for in-house games</div></li><li><div>
Sporadic On-shore training opportunities</div></li><li><div>
Friendly work environment</div></li><li><div>
Leave Encashment</div></li></ul><div></div><div><i>
Disclaimer:</i><i> At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.</i></div><div></div><div><i>
In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.</i></div></div><div></div>

Security Engineer (DevSecOps)

<div>
 <strong>
  About Contour
  <br/>
  <br/>
 </strong>
 Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.
 <br/>
 <br/>
 As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.
 <br/>
 <br/>
 What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 Constellation Payment Processing is a modern Payment Facilitator (PayFac) empowering SaaS businesses to grow revenue through seamless, embedded payments. As part of Constellation Software Inc. (TSE:CSU) &mdash; a global Canadian-based software leader at a $96B market cap and the 7th largest software company in the world &mdash; we combine the agility of a specialized payments company with the strength and stability of an established global powerhouse.
 <br/>
 <br/>
 We&rsquo;re building a cloud-native PayFac platform on AWS: microservices (DDD) across TypeScript/JavaScript, Java, and Ruby, with a ReactJS front end. As our Security Engineer, you&rsquo;ll co-own the DevSecOps program&mdash;driving continuous security automation, compliance automation, and penetration testing. You&rsquo;ll design and orchestrate SAST/SCA/DAST across our services, champion remediation practices, and partner closely with our compliance team to translate control objectives into repeatable, automated evidence.
 <br/>
 <br/>
 Our customers are
 <strong>
  ISV vendors
 </strong>
 who embed payments by integrating with our APIs, SDKs, and webhooks. That means security and compliance aren&rsquo;t afterthoughts&mdash;they&rsquo;re product features. You&rsquo;ll ensure our
 <strong>
  developer-facing surface area
 </strong>
 is secure by default: establishing standards for authentication and authorization (OIDC/OAuth2/JWT, mTLS/JWS for webhooks), key and secret management, request signing, idempotency, rate-limiting/abuse controls, and secure data handling that
 <strong>
  minimizes PCI scope
 </strong>
 for ISVs (tokenization, hosted fields/iframes, PAN vault boundaries, network tokens). You&rsquo;ll create
 <strong>
  secure integration patterns
 </strong>
 (reference apps, checklists, threat models/DFDs) so partners can implement quickly without compromising controls.
 <br/>
 <br/>
 Because we operate a multi-tenant PayFac, you&rsquo;ll harden isolation boundaries (network, identity, and data), lead
 <strong>
  supply-chain security
 </strong>
 (SBOMs, signing/provenance, gated deployments), and build
 <strong>
  continuous evidence
 </strong>
 for
 <strong>
  PCI DSS 4.0
 </strong>
 (and SOC 2/ISO as needed). You&rsquo;ll collaborate with partner security and compliance teams on due-diligence requests (SIG Lite, AOC/ROCs, shared-responsibility matrices), and you&rsquo;ll own pre-launch security reviews for new ISV integrations. You&rsquo;ll also help run incident response drills and define
 <strong>
  partner-facing comms and SLAs
 </strong>
 for security events.
 <br/>
 <br/>
 Finally, you&rsquo;ll
 <strong>
  research and implement AI-assisted security
 </strong>
 (triage, anomaly detection, auto-remediation PRs) with appropriate guardrails, and own KPIs that demonstrate multiplier effects&mdash;e.g., reduced MTTR, lower false-positive rates, higher auto-triage coverage, and faster time-to-evidence&mdash;so our platform&rsquo;s security posture continuously improves as our ISV ecosystem scales.
 <br/>
 <br/>
 <strong>
  What You&rsquo;ll Do
  <br/>
  <br/>
 </strong>
 <strong>
  Own Security Automation:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Design, implement, and run the CI/CD security toolchain: SAST, SCA, DAST, container and IaC scanning, secrets detection, SBOM generation, and policy-as-code.
  </li>
  <li>
   Integrate scanners into GitHub/GitHub Actions pipelines with PR gates, and auto-ticketing to JIRA; tune noise, baselines, and break-glass rules.
  </li>
  <li>
   Establish vulnerability management SLAs, risk acceptance workflow, and metrics dashboards (e.g., MTTR, vuln burn-down).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Embed Security In The SDLC
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Create lightweight secure-coding standards and review checklists for TypeScript/Node, Java, Ruby, React.
  </li>
  <li>
   Run threat modeling (STRIDE/PASTA) and produce DFDs (L0&ndash;L2) for new and high-risk flows.
  </li>
  <li>
   Lead a &ldquo;security champions&rdquo; program with engineering squads.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Platform &amp; Cloud Security (AWS/EKS)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Harden EKS workloads (admission controls, pod security, image signing, runtime protection), ECR scanning, and supply-chain security.
  </li>
  <li>
   Implement and iterate on IAM least-privilege, KMS/CloudHSM key management, network segmentation, WAF/Shield, CloudFront, GuardDuty/Security Hub, and centralized logging.
  </li>
  <li>
   Validate service-to-service auth (mTLS, OIDC, JWT), secrets management (AWS Secrets Manager/SSM), and data protection at rest/in transit (FIPSvalidated crypto).
  </li>
  <li>
   Manage security certificate adoption our own and 3rd party across the company technology stack
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compliance Automation
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Map controls and automate evidence for PCI DSS 4.0 (and SOC 2/ISO 27001 as needed): continuous monitoring, detector-to-control mappings, and audit-ready artifacts.
  </li>
  <li>
   Partner with compliance on policies, risk register, third-party/vendor assessments, and control testing cadence.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Penetration Testing &amp; Response
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Scope and coordinate internal and third-party penetration tests (API, web, mobile, cloud); plan fix-verification and retests.
  </li>
  <li>
   Contribute to incident response playbooks, tabletop exercises, and forensics runbooks.
  </li>
  <li>
   Participate in incident response events and be a key contributor on improving security posture
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Research &amp; Implement AI Security Tools
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Evaluate and deploy AI/ML capabilities (LLM-assisted code reviews, AI triage for SAST/SCA/DAST, anomaly detection over logs/telemetry, drift detection) to reduce toil and increase signal quality&mdash;without leaking sensitive code or data.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Own Outcomes &amp; KPIs
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Define baselines, instrument dashboards, and continuously tune models/policies to demonstrably improve detection efficacy, remediation speed, and compliance evidence quality.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Guardrails &amp; Governance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Establish safe-use patterns (PII redaction, repository allowlists, prompt/content controls, human-in-the-loop), document model/feature risks, and keep audit trails that map to PCI DSS 4.0 controls.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Automation &amp; SOAR Integration
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Orchestrate AI-assisted enrichment and response (e.g., auto-labeling, deduplication, prioritization, suggested fixes/PRs) across CI/CD, SIEM, ticketing, and chat.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  KPIs You&rsquo;ll Own
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   MTTR for high-severity vulns/incidents: &darr; 40&ndash;60% vs. baseline within 2&ndash;3 quarters.
  </li>
  <li>
   Alert noise reduction (precision/FP rate): &ge; 50% reduction in false positives on gated scans and detections.
  </li>
  <li>
   Auto-triage coverage: &ge; 70% of scanner findings enriched and prioritized by AI with reviewer acceptance &ge; 90%.
  </li>
  <li>
   AI-generated remediation PRs: &ge; 30% of low/medium issues fixed via assisted PRs passing CI policy.
  </li>
  <li>
   Time-to-evidence (PCI 4.0 controls): &darr; 50% for recurring audits via automated control artifacts.
  </li>
  <li>
   Signed-off service coverage: &ge; 90% of services covered by AI-backed detections and scan triage.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You&rsquo;ll Bring
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   8&ndash;10 years in application/cloud security or DevSecOps for high-availability platforms (fintech/payments ideal).
  </li>
  <li>
   Hands-on DevSecOps program administration experience with Veracode.
  </li>
  <li>
   Fluent in Terraform for the AWS Stack
  </li>
  <li>
   Strong CI/CD experience (GitHub Actions preferred) and automation in Python/TypeScript/Bash.
  </li>
  <li>
   Solid AWS security fundamentals: IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, VPC/LBs, WAF/Shield; Kubernetes/EKS hardening experience.
  </li>
  <li>
   Familiarity with microservices, event-driven systems, and DDD; ability to read code in TypeScript/Java/Ruby and basic ReactJS patterns.
  </li>
  <li>
   Working knowledge of PCI DSS 4.0 control objectives (tokenization/PAN handling, key management, segmentation, logging/retention), plus SOC 2/ISO 27001 concepts.
  </li>
  <li>
   Clear communication with engineers and non-technical stakeholders; bias to automate and simplify.
  </li>
  <li>
   Bonus Point: Payments domain exposure: EMV/3DS, PAN vaulting, network tokenization, P2PE, dispute/chargeback flows.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  How We&rsquo;ll Measure Success
  <br/>
  <br/>
 </strong>
 <li>
  90 days: Security scans embedded in CI for core services with actionable findings; baseline metrics and SLAs defined; initial PCI 4.0 control mappings complete.
 </li>
 6 months: False-positive rate &lt;10% on gating scans; P1/P2 MTTR within SLA; SBOMs &amp; dependency policies enforced; security champions running.
 <li>
  12 months: Compliance evidence automation covers priority controls; successful third-party penetration test with timely remediation; measurable reduction in highrisk vulns and misconfigurations.
  <br/>
  <br/>
 </li>
 <strong>
  Team &amp; Reporting
  <br/>
  <br/>
 </strong>
 This role sits in the
 <strong>
  CTO organization
 </strong>
 (Engineering/Platform) and partners daily with compliance, DevOps/SRE, Backend/Frontend teams, and Product.
 <br/>
 <br/>
 <strong>
  Our Stack (you Don&rsquo;t Need All Of These)
  <br/>
  <br/>
 </strong>
 AWS (EKS, ECR, KMS, CloudHSM, WAF/Shield, CloudFront, GuardDuty, Security Hub,
 <br/>
 <br/>
 CloudWatch), GitHub/GitHub Actions, Terraform, Node/TypeScript, Java, Ruby, React,
 <br/>
 <br/>
 Kafka, MongoDB, Postgres, Redis, Veracode, OWASP ZAP/Burp, AI Tools in Microsoft Teams, JIRA, Development IDEs (Amazon Q, Cursor, Claude Code)
 <br/>
 <br/>
 <strong>
  Exciting Benefits We Offer
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Market-leading Salary
  </li>
  <li>
   Medical Coverage &ndash; Self &amp; Dependents
  </li>
  <li>
   Parents Medical Coverage
  </li>
  <li>
   Provident Fund
  </li>
  <li>
   Employee Performance-based bonuses
  </li>
  <li>
   Home Internet Subsidy
  </li>
  <li>
   Conveyance Allowance
  </li>
  <li>
   Profit Sharing Plan [Tenured Employees Only]
  </li>
  <li>
   Life Benefit
  </li>
  <li>
   Child Care Facility
  </li>
  <li>
   Company Provided Lunch/Dinner
  </li>
  <li>
   Professional Development Budget
  </li>
  <li>
   Recreational area for in-house games
  </li>
  <li>
   Sporadic On-shore training opportunities
  </li>
  <li>
   Friendly work environment
  </li>
  <li>
   Leave Encashment
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <em>
   Disclaimer:
  </em>
 </strong>
 <em>
  At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.
  <br/>
  <br/>
 </em>
 <em>
  In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.
 </em>
</div>


Systems Limited

The Senior Azure Cloud Engineer will lead the design, migration, and management of enterprise-grade Azure environments, including on-premises to Azure migrations, Landing Zones, and Azure Kubernetes Service (AKS) deployments. The ideal candidate will bring deep expertise in cloud architecture, security, automation, and hybrid connectivity, enabling seamless modernization of legacy environments and the implementation of best practices based on Microsoft Cloud Adoption Framework (CAF).
<br><br>
Design, build, and maintain Azure Landing Zones in alignment with Microsoft CAF.
<br><br>
Establish and enforce Azure governance, compliance, and RBAC policies for consistent operations.
<br><br>
Optimize workloads for cost, performance, and scalability across the cloud environment.
<br><br>
Lead lift-and-shift and modernization projects for on-premises servers, applications, and databases to Azure.
<br><br>
Use tools like Azure Migrate, Azure Site Recovery (ASR), and Database Migration Service (DMS) for seamless transitions.
<br><br>
Implement hybrid connectivity with VPN, ExpressRoute, or SD-WAN integrations, ensuring secure and reliable communication.
<br><br>
Architect, deploy, and manage AKS clusters for microservices and containerized workloads.
<br><br>
Integrate AKS with CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins.
<br><br>
Monitor, optimize, and secure AKS clusters for enterprise workloads.
<br><br>
Design and manage VNets, route tables, and network security for hybrid and cloud-native solutions.
<br><br>
Integrate FortiGate firewalls (on-prem and in Azure) with high-availability tunnels for secure communication.
<br><br>
Optimize routing using ILB configurations and UDRs to prevent single points of failure.
<br><br>
Bachelor’s degree in computer science, Information Technology, or related field.
<br><br>
7+ years of experience with Microsoft Azure in enterprise environments.
<br><br>
:
<br><br>
On-premises to Azure migration projects.
<br><br>
Azure Landing Zone architecture and governance.
<br><br>
AKS deployment, scaling, and management.
<br><br>
Hybrid networking (ExpressRoute, VPN, FortiGate, or SD-WAN).
<br><br>
Infrastructure as Code (Terraform, Bicep, or ARM templates).
<br><br>
Strong experience with Azure Monitor, Log Analytics, and Sentinel for monitoring and security.
<br><br>
Azure Solutions Architect Expert (AZ-305)
<br><br>
Azure Administrator Associate (AZ-104)
<br><br>
Azure Security Engineer Associate (AZ-500)
<br><br>
Azure DevOps Engineer Expert (AZ-400)
<br><br>
CKA or Azure Kubernetes certifications

Senior Consultant Azure Cloud Services

Arc Inventor

<p>Arc Inventador is a fast-growing technology company delivering scalable SaaS solutions for global clients. We specialize in building high-performance platforms through software development, cloud-native engineering, and digital transformation. Our backend engineering team plays a vital role in designing secure, reliable, and scalable services that power mission-critical applications.</p><p>We are looking for a <b>Backend Engineer</b> with strong expertise in <b>Node.js backend services, cloud architecture, database design, API security, caching, and distributed systems</b>. You will design, develop, and maintain backend services that are secure, performant, and optimized for scalability across enterprise-grade applications.</p><p><b>Key ResponsibilitiesNode.js Backend Services &amp; Architecture</b></p><ul><li>Design and develop <b>scalable backend services</b> and APIs using <b>Node.js</b>.</li><li>Define and implement <b>microservice-based architectures</b> with a focus on modularity, maintainability, and performance.</li><li>Apply <b>secure coding practices</b> to prevent vulnerabilities such as injection attacks, CSRF, or XSS.</li></ul><p><b>API Design &amp; Integration</b></p><ul><li>Build and secure <b>RESTful APIs</b> with proper authentication/authorization (JWT, OAuth, Firebase Authentication).</li><li>Manage API versioning, response structures, and error handling.</li><li>Collaborate with frontend and mobile teams for seamless integration.</li></ul><p><b>Database Engineering &amp; Search Optimization</b></p><ul><li>Design and implement <b>database models</b> for relational (MySQL) and NoSQL systems.</li><li>Optimize queries and schema design for performance and scalability.</li><li>Work with <b>Elasticsearch</b> for indexing, full-text search, and analytics.</li></ul><p><b>Caching &amp; Performance Optimization</b></p><ul><li>Design and implement <b>caching layers</b> (Redis or equivalent) to optimize response times.</li><li>Define cache invalidation strategies and ensure consistency across distributed systems.</li><li>Apply best practices for high-performance API and system design.</li></ul><p><b>Background Jobs &amp; Distributed Systems</b></p><ul><li>Build and optimize <b>background job processing pipelines</b> using queues and schedulers.</li><li>Ensure reliability of distributed systems, handling retries and failures gracefully.</li><li>Scale workloads to support large data sets and concurrent requests.</li></ul><p><b>Cloud Engineering &amp; Security</b></p><ul><li>Deploy, monitor, and scale backend services on <b>cloud platforms (AWS, GCP, or Azure)</b>.</li><li>Apply <b>cloud-native security measures</b> including IAM roles, secret management, and encryption.</li><li>Ensure compliance with <b>API security standards</b> and conduct regular audits.</li></ul><p><b>Required Skills &amp; Experience</b></p><ul><li>3&ndash;5 years of professional experience as a <b>Backend Engineer</b>.</li><li>Strong command of <b>Node.js, REST APIs, and backend architecture</b>.</li><li>Hands-on experience with <b>MySQL database modeling</b> and <b>Elasticsearch</b>.</li><li>Proficiency in <b>caching systems (Redis, Memcached, etc.)</b>.</li><li>Expertise in <b>cloud engineering</b> and backend deployment pipelines.</li><li>Strong understanding of <b>API authentication, security protocols, and secure coding practices</b>.</li><li>Experience with <b>background jobs, distributed systems, and microservices</b>.</li><li>Familiarity with <b>Git, Agile methodologies, and CI/CD pipelines</b>.</li><li>Knowledge of <b>Docker/Kubernetes</b> for containerization is a plus.</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

Senior Software Engineer

Explore 477+ Cloud security engineer in Karachi this October. Find roles across top companies and apply now to boost your career.

477 cloud security engineer jobs IN Karachi

Cloud Security Engineer

DevSecOps Engineer

RedHat Dev SecOps Engineer

Security Engineer (DevSecOps)

Security Engineer (DevSecOps)

Senior Consultant Azure Cloud Services

Senior Software Engineer