security guard

data engineer

it support engineer

ai engineer

aws devops engineer

cyber security engineer

Code Graphers

<p><b>Job Summary</b></p><p>We are seeking a skilled Cyber Security Engineer to safeguard our organization&rsquo;s systems, networks, and data from cyber threats. The ideal candidate will design, implement, and maintain security solutions while proactively identifying vulnerabilities and responding to incidents.</p><p><b>Key Responsibilities</b></p><ul><li>Design, implement, and maintain security architecture and controls</li><li>Monitor security systems (SIEM, IDS/IPS, EDR) for suspicious activity</li><li>Conduct vulnerability assessments and penetration testing</li><li>Investigate and respond to security incidents</li><li>Implement security policies, standards, and procedures</li><li>Perform risk assessments and recommend mitigation strategies</li><li>Ensure compliance with regulatory standards (ISO 27001, NIST, GDPR, etc.)</li><li>Collaborate with IT teams to secure infrastructure and applications</li></ul><p><b>Required Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Cyber Security, Computer Science, or related field</li><li>3&ndash;5 years of experience in cyber security</li><li>Hands-on experience with firewalls, SIEM tools, endpoint protection</li><li>Strong understanding of network protocols and security architecture</li><li>Experience with cloud security (AWS/Azure/GCP)</li><li>Relevant certifications preferred (CISSP, CEH, CISM, Security+)</li></ul><p><b>Technical Skills</b></p><ul><li>Threat detection &amp; response</li><li>Vulnerability management tools (Nessus, Qualys)</li><li>SIEM platforms (Splunk, Sentinel)</li><li>Firewall &amp; IDS/IPS configuration</li><li>Incident response &amp; forensics basics</li></ul><p>Job Type: Contract<br/>Contract length: 12 months</p><p>Work Location: In person</p>

Cyber Security Engineer

Scaleup Connect

<p><b>Location:</b> 100% Remote (Preference: Lahore, Pakistan)</p><p><b>Working Schedule:</b> 7:00 pm to 2:30 am (Pakistan Standard Time) | Monday to Friday</p><p><b>Experience: 2&ndash;4 years</b> experience in network security or firewall administration</p><p><b>Role Overview</b></p><p>Scaleup Connect is looking on behalf of a client a <b>Fortinet Security Specialist</b> responsible for managing firewall infrastructure, configuring security policies, and ensuring network protection against cyber threats. The ideal candidate should have strong hands-on experience with <b>FortiGate environments and enterprise network security operations</b>.</p><p><b>Key Responsibilities</b></p><ul><li>Configure and manage <b>FortiGate Firewall policies and security rules</b></li><li>Administer <b>FortiManager and FortiAnalyzer</b> for centralized management and monitoring</li><li>Implement and maintain <b>VPN connectivity (IPSec &amp; SSL VPN)</b></li><li>Monitor network traffic and investigate potential <b>security incidents</b></li><li>Analyze firewall logs and perform <b>threat detection and mitigation</b></li><li>Optimize firewall performance and enforce <b>security compliance policies</b></li><li>Collaborate with IT teams to ensure <b>secure network architecture</b></li></ul><p><b>Required Skills</b></p><ul><li>Hands-on experience with <b>FortiGate Firewall configuration</b></li><li>Knowledge of <b>FortiManager and FortiAnalyzer</b></li><li>Strong understanding of <b>network security concepts</b></li><li>Experience with <b>VPN configuration and troubleshooting</b></li><li>Ability to analyze logs and respond to <b>security threats</b></li></ul><p><b>Preferred Certifications</b></p><ul><li>Fortinet NSE 4 &ndash; Network Security Professional</li><li>Fortinet NSE 5 / NSE 6</li><li>CompTIA Security+</li><li>CCNA Security</li></ul><p>Pay: Up to Rs80,000.00 per month</p><p>Application Question(s):</p><ul><li>Please rate your English communication proficiency, both verbal and written, on a scale of 1 to 10, where 1 represents the lowest level of proficiency and 10 represents the highest level of proficiency.</li><li>Are you comfortable working the night shift from 7:00 PM to 2:30 AM (Pakistan Standard Time)?</li><li>Kindly indicate whether you have completed any certifications mentioned in the Job Description (JD). If yes, please list them below.</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>FortiGate Firewall configuration: 1 year (Required)</li><li>FortiManager &amp; FortiAnalyzer: 1 year (Required)</li><li>VPN connectivity (IPSec &amp; SSL VPN): 1 year (Required)</li><li> VPN configuration and troubleshooting: 1 year (Required)</li></ul><p>Language:</p><ul><li>English (Required)</li></ul><p>Location:</p><ul><li>Lahore (Required)</li></ul><p>Work Location: Remote</p>

Network Security Engineer

Contour Software

<div><div>About Contour</div><div></div><div><div>
Contour Software</div> has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.</div><div><br>
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.</div><div><br>
What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!</div><div></div><div><div><div>
The Division:<br>
<div>FOG Software Group</div> - a division of Vela Software Group part of Constellation Software Inc. - specializes in complete ERP solutions for manufacturers and distributors of make-to-order and engineer-to-order products in the building products, capital equipment, and automotive sectors. FOG also includes a complementary portfolio of software solutions for transportation management, material optimization, supply-chain management, multi-channel merchant, and direct-to-consumer distribution.<br>
<br>
The Position:<br>
As GRC Analyst for the FOG Software group , you will support certain companies within the FOG Software operating group to meet the regulatory and compliance requirements specifically PCI DSS as well support in meeting the Vela compliance requirements by working with specific business units IT, customer support, development teams as well as Vela GRC. We are looking for individuals who move fast, can break down and solve complex problems, and have strong ethical values.<br>
The hired candidate will be located and work out of the Contour Software Islamabad/Karachi/Lahore office, working as part of the resource-center, as an extension of the division-based G&amp;A department.<br>
<br>
Responsibilities:</div></div><div><div>
Document and implement information security policies and standards (related to PCI-DSS and NIST CSF compliance requirements) specific to certain business units.</div></div><div><div>
Lead the PCI-DSS compliance initiatives, monitor, and report the gaps in compliance to management.</div></div><div><div>
Review information systems, IT and SSDLC practices to ensure compliance with business unit's GDPR/ISO/PCI-DSS requirements as well as Vela security framework requirements including processes, standards, policies, and procedures.</div></div><div><div>
Conduct risk assessments to identify potential risk events and assist with quantifying their probability of occurrence and impact on the business and work with risk owners in mitigating those risks.</div></div><div><div>
Collaborate IT TechOps and security team to monitor risks and compliance status, report and develop countermeasures and contingency plans.</div></div><div><div>
Monitor the security logs of anti-virus and SIEM/IDS to verify that all systems are up-to-date and all incidents are being logged, monitored and timely responded to as per policy requirements.</div></div><div><div>
Monitor and evaluate security measures in collaboration with the IT TechOp team to protect against reasonably anticipated threats or hazards to the privacy, security, or integrity of protected information (PII, PCI).</div></div><div><div>
Manage external audits and assessments, oversee audit findings and management actions plans. Ensure corrective actions are taken. Work with risk owners in developing risk treatment plans, time estimations, follow-up and report status on action plans.</div></div><div><div>
Perform tasks as set forth by the management team.</div></div><div><div>
Provide security awareness and compliance trainings to the IT team as well as end-users in line with the PCI-DSS requirements.</div></div></div><div><div><div><br>
<br>
Qualification(s):</div></div><div><div>
Bachelor's Degree in Information Technology or related technical field.</div></div><div><div>
Candidate should have a minimum of 3+ years either Information Security Risk or Cyber Security Risk experience.</div></div><div><div>
Must have knowledge of cloud-based environments (AWS, GCP, Azure, etc.) with cloud governance experience.</div></div><div><div>
Must have experience in working in e-commerce environments and PCI-DSS V3.2.1/4.0.</div></div><div><div>
Sound working knowledge of industry best practices (NIST, ISO, SANS, COBIT) and Legislative and Regulatory and Industry Compliance Requirements (PCI, CCPA, GDPR etc.).</div></div><div><div>
Clear understanding of SDLC process and how Security validation is tied to that.</div></div><div><div>
Must have exceptional written, verbal and presentation communication skills.</div></div><div><div>
Ability to facilitate cross-functional teams.</div></div><div><div>
Ability to translate business requirements into control objectives.</div></div></div><div><div><div>
Strong project management skills.</div></div><div><div><br>
<br>
Good to Have:</div></div><div><ul><li><div>
Experience with PCI-DSS v4.0</div></li></ul></div><div><ul><li><div>
Experience of GRC Tools (such as Service Now, RSA Archer, 6Clicks)</div></li></ul></div><div><div><br>
One or more of the following certifications:</div></div><div><ul><li><div>
ISO 27001 Lead auditor/Implementer</div></li></ul></div><div><ul><li><div>
CISM, CISA and/or CISSP</div></li></ul></div><div><ul><li><div>
CRISC</div></li></ul></div><div><div><br>
<br>
Work Shift Timings:</div></div><div><ul><li><div>
6:00 pm to 3:00 am (Pakistan Standard Time) &ndash; 7:00 am to 4:00 pm (Central Time Zone)</div></li></ul></div></div><div></div><div><br>
Exciting Benefits we offer:</div><ul><li><div>
Market-leading Salary</div></li><li><div>
Medical Coverage &ndash; Self &amp; Dependents</div></li><li><div>
Parents Medical Coverage</div></li><li><div>
Provident Fund</div></li><li><div>
Employee Performance-based bonuses</div></li><li><div>
Home Internet Subsidy</div></li><li><div>
Conveyance Allowance</div></li><li><div>
Profit Sharing Plan [Tenured Employees Only]</div></li><li><div>
Life Benefit</div></li><li><div>
Child Care Facility</div></li><li><div>
Company Provided Lunch/Dinner</div></li><li><div>
Professional Development Budget</div></li><li><div>
Recreational area for in-house games</div></li><li><div>
Sporadic On-shore training opportunities</div></li><li><div>
Friendly work environment</div></li><li><div>
Leave Encashment</div></li></ul><div></div><div><i>
Disclaimer:</i><i> At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.</i></div><div></div><div><i>
In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.</i></div></div><div></div>

GRC Analyst

INTECH Automation & Intelligence

<div>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 Join our Team - Your career journey starts here &ndash; not just a job, but a future.
 <br/>
 <br/>
 <strong>
  Our Potential Opportunity
  <br/>
  <br/>
 </strong>
 INTECH Automation Intelligence is seeking a skilled and solution-oriented
 <strong>
  Solution &amp; Proposal Engineer
 </strong>
 to join our fast-paced
 <strong>
  Solution Centre Department
 </strong>
 . This role is central to designing, optimizing, and proposing control system solutions tailored to customer RFQs and technical requirements. You&rsquo;ll be working on high-impact projects across industries like Oil &amp; Gas, Utilities, and Energy &mdash; shaping automation outcomes that prioritize performance, safety, and cost-efficiency.
 <br/>
 <br/>
 <strong>
  What You&rsquo;ll Lead And Deliver
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Review the RFQ, prepare scope summaries and identify the value addition in project. Ensure that the design solution is in line with the customer requirements.
  </li>
  <li>
   Must have in-depth knowledge of the different PLC / DCS-/ESD based control systems (Rockwell/ Schneider/Emerson/Siemens) and knowledge of SCADA systems and their requirements.
  </li>
  <li>
   Estimation and proposal making for brown field &amp; Green field jobs will be additional advantage.
  </li>
  <li>
   Perform effort estimation for the engineering, construction and testing works and develop the project execution plan to meet customer requirement.
  </li>
  <li>
   Providing sales support for compliance of key proposals for against the RFQ received
  </li>
  <li>
   Proposals related coordination &amp; follow-ups with sales team
  </li>
  <li>
   Provide support to team in taking multiple quotes from new and existing vendors.
  </li>
  <li>
   Shall be able to develop standard procedures and have good writing skills to produce high-level execution philosophy, project plans, design procedures, and commercial terms &amp; conditions for customers' understanding.
  </li>
  <li>
   Shall propose and design optimal control system architectures with in-depth knowledge of network protocols and design.
  </li>
  <li>
   Ensure Quality of Product solution as defined.
  </li>
  <li>
   In-depth knowledge of industrial standards like, IEC, NEC, NFPA, Cyber security standards.
   <br/>
   <br/>
  </li>
 </ul>
 Requirements:
 <br/>
 <br/>
 <strong>
  To Be Successful in This Role, You Must Have:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s/Master Degree in engineering or in related field
  </li>
  <li>
   Minimum 6 - 8 years of work experience in engineering or technical sales is required.
  </li>
  <li>
   Knowledge and experience of field instrumentation selections and designing of cost optimized solutions.
  </li>
  <li>
   Knowledge and experience of site work and estimation of construction scope for installation of control system solution will be an advantage.
  </li>
  <li>
   Solid analytical and problem-solving skills.
  </li>
  <li>
   Must be keen in business development and have skills to negotiate prices and discount schedules with vendors.
  </li>
  <li>
   Excellent written and verbal communication skill
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  We Offer Competitive Benefits:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Global Exposure: Opportunities to work on international projects and collaborate with global teams.
  </li>
  <li>
   Competitive Compensation: A salary package that recognizes your expertise and contributions.
  </li>
  <li>
   Annual Bonus: Performance-driven rewards based on your gross pay to celebrate your achievements and contributions.
  </li>
  <li>
   Site Allowance: Dollarized Site Allowance provided as per company policy to support your field assignments and on-site requirements
  </li>
  <li>
   In-House Lunch: Delicious meals provided during work hours to keep you fueled and focused.
  </li>
  <li>
   Health Insurance: OPD coverage for you and your parents, plus IPD coverage for you and your dependents.
  </li>
  <li>
   Learning Opportunities: Access to training programs, workshops, and certifications to enhance your skills.
  </li>
  <li>
   Work-Life Balance: Paid time off, including annual leave and holidays.
  </li>
  <li>
   Inclusive Environment: A workplace that celebrates diversity and fosters collaboration.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  ﻿Why Join INTECH Automation Intelligence?
  <br/>
  <br/>
 </strong>
 At INTECH, you will have the opportunity to work with a globally renowned industrial automation and digitalization technology company. For nearly 30 years, INTECH has partnered with major oil and gas global giants to deliver innovative solutions. As we continue to lead in the Industry 4.0 era, you will be at the forefront of transformative technologies that solve real-world challenges.
 <br/>
 <br/>
 <strong>
  What to Expect After Applying?
  <br/>
  <br/>
 </strong>
 Explore how INTECH&rsquo;s Talent Acquisition team ensures a seamless hiring journey. From embracing talent with a passion for innovation to fostering a culture of continuous learning and growth, we&rsquo;re dedicated to finding and supporting the best minds in the industry.
 <br/>
 <br/>
 Click Here to learn more about our hiring process and discover your path to success with us.
 <br/>
 <br/>
 Our hiring process is designed to assess your skills and potential in a fair and inclusive manner. After applying, you will be guided through a structured evaluation process to ensure mutual alignment.
 <br/>
 <br/>
 <strong>
  INTECH Automation Intelligence
 </strong>
 is an equal opportunity employer committed to fostering an inclusive hiring environment where qualified individuals with disabilities are encouraged to apply.
</div>


Solution & Proposal Engineer

CureMD

<div><div>Job Overview:</div><div></div><div>
As a Level 1 SOC Analyst, your mission will be to safeguard our organization's information systems, focusing on compliance with healthcare regulations. Your role encompasses implementing advanced security measures, managing incidents, and ensuring the security of our cloud infrastructure. You'll monitor for threats, uphold data integrity, and maintain compliance with healthcare standards. This position demands a deep understanding of security protocols, cloud technologies, and regulatory requirements in healthcare, aiming to protect sensitive health data effectively.</div><div></div><div>
Job Responsibilities:</div><ul><li><div>
Implement and Monitor security alerts and events from Security Tools like SIEM, EDR, XDR, (preferably Azure Cloud Defender).</div></li><li><div>
Provide initial analysis and response to security incidents, including phishing attempts, malware infections, and network breaches.</div></li><li><div>
Engage in endpoint security monitoring, including the management of core Windows processes, event logs, Sysmon, and endpoint detection tools.</div></li><li><div>
Collect, analyze, and correlate security data from tools like EDR, SIEM for incident investigation and response.</div></li><li><div>
Assist senior analysts with incident response activities, including containment, eradication, and recovery.</div></li><li><div>
Document all activities, including incident tracking and report writing, to ensure accurate and timely information dissemination.</div></li><li><div>
Stay up-to-date on emerging threats and security trends through continuous learning.</div></li><li><div>
Review critical assets logs periodically to achieve security compliance.</div></li></ul><div></div><div>
Qualifications:</div><ul><li><div>
Bachelor's degree in IT, Computer Science, Software Engineering or in Cyber Security.</div></li><li><div>
0-1 years of experience in IT Security.</div></li><li><div>
Understanding of Cloud-based IT infrastructure.</div></li><li><div>
Good reporting, documentation and presentation skills.</div></li><li><div>
Knowledge of basic IT security concepts.</div></li><li><div>
Knowledge of Incident Management Processes.</div></li><li><div>
Hands-on experience with tools like MS Azure Cloud Defender, Manage Engine, or Cloudflare.</div></li><li><div>
Knowledge of SIEM solutions, EDR, or XDR.</div></li><li><div>
Certifications such as CEH, CC or CompTIA Security+.</div></li></ul><div></div><div>
Compensation and Benefits:</div><div></div><div>
   Financial:</div><ul><li><div>
Competitive salary and bi-annual bonus.</div></li><li><div>
Fast track and uncapped career growth for high performers.</div></li><li><div>
Company-sponsored vehicle financing (car and bike).</div></li><li><div>
Interest-free loans.</div></li><li><div>
Provident Fund: CureMD matches up to 8% of your base salary.</div></li></ul><div></div><div>
   Health and Wellness:</div><ul><li><div>
In-house clinic with a team of certified male and female doctors with 24/7 telemedicine service.</div></li><li><div>
Hospital treatment monitoring by company doctors.</div></li><li><div>
Comprehensive health coverage for your immediate family (outpatient, inpatient, maternity and parents' inpatient).</div></li><li><div>
Exclusive health benefits and discounts at top class clinics and labs.</div></li></ul><div></div><div>
     Supportive Workplace:</div><ul><li><div>
Pick-up and drop-off services for female employees.</div></li><li><div>
In-house daycare facility.</div></li><li><div>
In-house gym and recreational area to unwind.</div></li></ul><div></div><div>
   Continued Learning:</div><ul><li><div>
Company-sponsored trainings, workshops, development programs and retreats.</div></li><li><div>
Paid specialized trainings/certifications.</div></li></ul><div></div><div>
The Difference You&rsquo;ll Make:</div><div><br>
At CureMD, every role, whether senior or junior, plays a pivotal part in transforming healthcare. By joining our innovative team, you&rsquo;ll contribute to groundbreaking technology that directly impacts patient care, enhances healthcare efficiency, and saves lives globally. Your skills and passion will drive meaningful change, helping us deliver solutions that support healthcare professionals in critical, real-time settings. Together, we&rsquo;re not just advancing technology &mdash; we&rsquo;re making a tangible difference in people&rsquo;s lives. Together, let&rsquo;s save lives.</div></div>

SOC L1 Analyst

ibex

<div>
 <p>
  To protect IBEX infrastructure from emerging threats and help organization in achieving business objectives. This position acts as senior level IS resource having strong background of Network and Cyber Security functions. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   A. Information Security Risk Management &amp; Assessments (Hands-On)
  </strong>
 </p>
 <ul>
  <li>
   Lead and perform end-to-end IT Risk Assessments, including inherent risk identification, control design and evaluation of operating effectiveness, residual risk rating and risk treatment recommendations.
  </li>
  <li>
   Assess risks across Infrastructure (on-prem, cloud, hybrid), Applications and Systems, data security and privacy, identity and access management, change and configuration management etc.
  </li>
  <li>
   Develop and maintain risk registers, risk heatmaps, and executive-level risk reporting.
  </li>
  <li>
   Support internal and external audits by providing risk documentation and remediation evidence.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   B. Supply Chain &amp; Third-Party Risk Management
  </strong>
 </p>
 <ul>
  <li>
   Conduct Supply Chain / Third-Party IT Risk Assessments for vendors, partners, and service providers.
  </li>
  <li>
   Evaluate vendor risks related to Information Security, Data Protection &amp; Privacy, Business Continuity and resilience, sub-contractor and fourth party risks.
  </li>
  <li>
   Review and assess Vendor security questionnaires, independent audit reports such as SOC2, ISO 27001, PCI DSS, Penetration Test Summaries, ISO 42001 for AI Service Providers etc.
  </li>
  <li>
   Collaborate with Procurement, Legal, and Compliance teams to define risk-based onboarding criteria, support contract security clauses, track vendor risk remediation activities etc.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   C. AI Risk Assessments &amp; AI System Impact Assessments
  </strong>
 </p>
 <ul>
  <li>
   Lead and perform AI Risk Assessments across AI/ML systems, including but not limited to model risks, data quality and bias risks, security and adversarial risks, privacy and data protection risks, ethical and responsible AI risks etc.
  </li>
  <li>
   Conduct AI System Impact Assessments (AISIAs) to evaluate impact on individuals and customers, regulatory and compliance implications, business and reputational risks etc.
  </li>
  <li>
   Align AI risk activities with relevant frameworks and regulations, such as ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework, Applicable data protection and AI regulations etc.
  </li>
  <li>
   Partner with AI, Data Science, Legal, and Product teams to embed risk controls into AI system lifecycles.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   D. Team Leadership &amp; Management
  </strong>
 </p>
 <ul>
  <li>
   Manage, coach, and mentor team members.
  </li>
  <li>
   Review and approve risk assessment deliverables to ensure quality and consistency.
  </li>
  <li>
   Allocate work, set priorities, and track progress against agreed timelines.
  </li>
  <li>
   Provide performance feedback, skill development guidance, and technical direction.
  </li>
  <li>
   Promote standardization of risk assessment methodologies, templates, and reporting.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   E. Stakeholder Engagement &amp; Reporting
  </strong>
 </p>
 <ul>
  <li>
   Act as a trusted risk advisor to technology, business, and senior leadership stakeholders.
  </li>
  <li>
   Present risk findings and recommendations to IT leadership, Risk committee, Senior management etc.
  </li>
  <li>
   Support the development of risk policies, standards, and procedures.
  </li>
  <li>
   Drive a culture of risk awareness and accountability across the organization.
  </li>
 </ul>
 <li>
 </li>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Qualifications
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Bachelors/Masters Degree in IT/CS/Software Eng./Telecom
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience
  </strong>
  8 - 12 years
 </p>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Required Skills
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   5+ years of hands-on experience in IT/Information Security Risk Management
  </li>
  <li>
   Strong understanding of ITRM concepts, methodologies, controls and architectures.
  </li>
  <li>
   Cloud. Hands-on experience with Third-Party/Supply Chain Risk Assessments
  </li>
  <li>
   Knowledge of risk frameworks such as ISO 27005, NIST CSF etc.
  </li>
  <li>
   Strong presentation and communication skills
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Reporting Time: 5pm to 2am (PKST)
  </li>
 </ul>
 <p>
 </p>
</div>


Principal IT Security - (GRC)

Techbridge Consultancy Services

<p><b>Job Location:</b> Gulberg, Lahore (On-Site)<br/><b>Experience Required:</b> 2&ndash;3 Years<br/><b>Salary:</b> Up to 110,000 PKR</p><p><b>Responsibilities:</b></p><p>Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:</p><ul><li>SOC monitoring coverage for any of the following shifts: <b>EST Time 8:00am &ndash; 4:00pm (PST 5:00pm &ndash; 1:00am), 4:00pm &ndash; 12:00am (PST 1:00am &ndash; 9:00am), 12:00am &ndash; 8:00am (PST 9:00am &ndash; 5:00pm)</b>; the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats</li><li>In-depth analysis of security events, alerts and incidents</li><li>Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats</li><li>Analyzing logs, network traffic and data to identify potential threats and vulnerabilities</li><li>Development security dashboards and reporting; compile threat intelligence reports and manage log data</li><li>Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)</li><li>Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)</li><li>Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)</li><li>Firewall rules configuration and optimization</li><li>SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)</li><li>Technical writing and security policy development</li><li>Staying current on industry trends, keeping up-to-date with relevant CVE&rsquo;s and the evolving threat landscape</li><li>Conducting vulnerability scans of network and applications</li><li>Keeping company systems up-to-date with current security patches</li><li>Recommending security improvements to line managers or senior management</li></ul><p><b>Requirements:</b></p><ul><li>Strong understanding of cybersecurity principles and the SOC environment</li><li>Bachelor&rsquo;s degree in cyber security, computer sciences or equivalent</li><li>Good understanding of vulnerability management tools and techniques</li><li>Good understanding of Windows, Linux and macOS operating systems and endpoints</li><li>Knowledge of modern problem-solving skills, and keen attention to detail</li><li>Good understanding of the modern security in SDLC practices</li><li>Capable of Balancing multiple priorities and remaining flexible in a changing environment</li><li>Good communication and interpersonal skills</li><li>Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)</li></ul><p><b>Other duties may include:</b></p><p>&middot; Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)</p><p>&middot; Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services</p><p>&middot; Personnel are required to work on-site; remote or hybrid work options will not be available</p><p>&middot; Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services</p><p>&middot; Personnel must not work more than 12 consecutive hours per shift</p><p>&middot; Personnel are required to adhere to internal cybersecurity and IT policies and standards</p><p>&middot; Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer data</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Are you comfortable working onsite in any of the following SOC shift timings?</li><li>Are you comfortable with an on-site role, as this position is not remote or hybrid?</li><li>Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?</li><li>Are you fluent in English, both written and spoken?</li><li>Are you from Lahore? (Yes/No)</li></ul><p>Work Location: In person</p>

SOC Analyst

Explore 204+ Cyber security engineer in Lahore this March. Find roles across top companies and apply now to boost your career.