security expert

Jazz

<div>
 
 
 Grade: L2
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 26 April 2026
 
 
 
 
 
 What is Expert Application &amp; Product Security?
 
 
 
 
 Expert Application &amp; Product Security
 
 is responsible to drive secure design, development, and deployment of digital products. This role is responsible for embedding security across the&nbsp;
 
 software development lifecycle (SDLC)
 
 , securing APIs and microservices, and ensuring products are resilient against evolving cyber threats.
 
 
 Main responsibility of this role is to safeguard software applications for potential threats &amp; vulnerabilities by analyzing and effectively testing implementation of different application security controls to protect organization's digital footprint from cyber threats.
 
 
 The role reports directly to the Stream Head Cyber Security with an extended team of 11 team members.
 
 
 &nbsp;
 
 
 
 What does Expert Application &amp; Product Security?
 
 
 
 1.&nbsp;&nbsp;&nbsp;&nbsp; Define and lead the&nbsp;
 
 Application Security (AppSec) strategy
 
 &nbsp;across all products
 
 
 2.&nbsp;&nbsp;&nbsp;&nbsp; Establish secure SDLC (SSDLC) frameworks and governance
 
 
 3.&nbsp;&nbsp;&nbsp;&nbsp; Develop policies, standards, and secure coding guidelines
 
 
 4.&nbsp;&nbsp;&nbsp;&nbsp; Align AppSec with enterprise risk management and business objectives
 
 
 5.&nbsp;&nbsp;&nbsp;&nbsp; Conduct threat modelling (STRIDE, attack trees) for applications and platforms
 
 
 6.&nbsp;&nbsp;&nbsp;&nbsp; Review and approve secure architectures for:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Web and mobile applications
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; APIs and microservices
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cloud-native platforms
 
 
 7.&nbsp;&nbsp;&nbsp;&nbsp; Enforce best practices based on&nbsp;OWASP&nbsp;standards (Top 10, ASVS, API Top 10)
 
 
 8.&nbsp;&nbsp;&nbsp;&nbsp; Integrate security into CI/CD pipelines:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAST, DAST, SCA, IAST
 
 
 9.&nbsp;&nbsp;&nbsp;&nbsp; Automate security testing and policy enforcement
 
 
 10.&nbsp; Work closely with DevOps teams to implement "shift-left" security
 
 
 11.&nbsp; Define security gates and release criteria
 
 
 12.&nbsp; Secure externally exposed products and services
 
 
 13.&nbsp; Implement API security controls:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authentication (OAuth2, JWT)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Rate limiting, bot protection
 
 
 14.&nbsp; Protect against:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Injection attacks
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Broken authentication
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Business logic abuse
 
 
 15.&nbsp; Secure Android/iOS applications:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reverse engineering protection
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Runtime protection (RASP)
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Secure storage &amp; communication
 
 
 16.&nbsp; Conduct mobile app security testing
 
 
 17.&nbsp; Implement API gateways and secure API lifecycle management
 
 
 18.&nbsp; Conduct secure coding training for developers
 
 
 19.&nbsp; Provide remediation guidance and best practices
 
 
 20.&nbsp; Build a security-first culture within software engineering teams
 
 
 &nbsp;
 
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 Requirements
 
 
 
 
 
 What are we looking for and what does it require to be Expert Application &amp; Product Security?
 
 
 <ul>
 <li>
 BS/MS in CyberSecurity/Information security/Information Technology
 </li>
 <li>
 Practical experience of application security in Banking / Telco sector
 </li>
 </ul>
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least 04 years of experience in security design and penetration testing of mobile applications &amp; APIs
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Functional
 
 
 
 o&nbsp;&nbsp; Ability to organize, plan and document tasks;
 
 
 o&nbsp;&nbsp; Ability to manage internal &amp; external stakeholders;
 
 
 o&nbsp;&nbsp; Possess good logical and analytical skills to help in analysis of Cyber Security risks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Technical
 
 
 
 o&nbsp;&nbsp; Strong expertise in:
 
 
 &sect;&nbsp; Web application security (OWASP Top 10)
 
 
 &sect;&nbsp; API security and microservices
 
 
 &sect;&nbsp; Authentication &amp; authorization models
 
 
 o&nbsp;&nbsp; Experience with manual penetration testing
 
 
 o&nbsp;&nbsp; Hands-on with:
 
 
 &sect;&nbsp; SAST: Checkmarx, Fortify, SonarQube
 
 
 &sect;&nbsp; DAST: Burp Suite, OWASP ZAP
 
 
 &sect;&nbsp; SCA: Snyk, Black Duck
 
 
 o&nbsp;&nbsp; Understanding of:
 
 
 &sect;&nbsp; Java, .NET, Node.js, Python (at least one deeply)
 
 
 &sect;&nbsp; CI/CD pipelines (Jenkins, GitLab, GitHub Actions)
 
 
 o&nbsp;&nbsp; Familiarity with Infrastructure as Code (Terraform, etc.)
 
 
 o&nbsp;&nbsp; Lead and mentor Application Security Testers
 
 
 o&nbsp;&nbsp; Define KPIs and performance metrics
 
 
 o&nbsp;&nbsp; Stakeholder management across Dev, QA, Product, and Risk teams
 
 
 
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Application & Product Security

<div>
 
 
 Grade: L2/L3
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 30 April 2026
 
 
 
 
 
 What is Telco Network Security Expert?
 
 
 
 
 Telco Network Security Expert
 
 is responsible to lead the design, implementation, and continuous improvement of security controls across Jazz's telecom core, signaling infrastructure, and cloud-native NFVI/5G environments.
 
 
 This role is critical in protecting the organization against evolving threats targeting SS7/Diameter signaling, 4G EPC, and 5G Service-Based Architecture (SBA), while ensuring secure adoption of virtualization and cloud-native network functions.
 
 
 The role reports directly to the Manager Architecture &amp; Cloud Security with an extended team of 15 team members.
 
 
 
 
 What does Telco Network Security Expert do?
 
 
 
 1.&nbsp;&nbsp;&nbsp;&nbsp; Secure SS7, Diameter, and 5G SBA (Service-Based Architecture) signaling networks
 
 
 2.&nbsp;&nbsp;&nbsp;&nbsp; Implement signaling firewalls and anti-fraud controls (SMS, voice, roaming attacks)
 
 
 3.&nbsp;&nbsp;&nbsp;&nbsp; Monitor and mitigate attacks such as:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Location tracking (ATI abuse)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; SMS interception
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Call redirection / spoofing
 
 
 4.&nbsp;&nbsp;&nbsp;&nbsp; Ensure secure interconnects with roaming partners and third parties
 
 
 5.&nbsp;&nbsp;&nbsp;&nbsp; Design and enforce security for:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EPC (MME, SGW, PGW, HSS)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; 5G Core (AMF, SMF, UPF, AUSF, UDM, NRF)
 
 
 6.&nbsp;&nbsp;&nbsp;&nbsp; Implement security controls aligned with 3GPP standards
 
 
 7.&nbsp;&nbsp;&nbsp;&nbsp; Secure APIs in 5G SBA architecture (OAuth2, TLS, API gateways)
 
 
 8.&nbsp;&nbsp;&nbsp;&nbsp; Perform security hardening of network functions (VNFs/CNFs)
 
 
 9.&nbsp;&nbsp;&nbsp;&nbsp; Secure NFV infrastructure (OpenStack, Kubernetes, containers)
 
 
 10.&nbsp; Implement micro-segmentation and zero-trust models
 
 
 11.&nbsp; Ensure workload protection for CNFs and VNFs
 
 
 12.&nbsp; Integrate telco workloads with cloud security controls (public/private cloud)
 
 
 13.&nbsp; Monitor telecom-specific threats using SIEM/SOC platforms
 
 
 14.&nbsp; Integrate telecom probes and logs (signaling, GTP, Diameter) into SOC
 
 
 15.&nbsp; Lead incident response for telecom network attacks
 
 
 16.&nbsp; Conduct threat hunting focused on telecom fraud and signaling abuse
 
 
 17.&nbsp; Define end-to-end telecom security architecture
 
 
 18.&nbsp; Evaluate and deploy telecom security tools:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Signaling firewalls (SS7/Diameter/5G)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; DDoS protection systems
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IDS/IPS for telco protocols
 
 
 19.&nbsp; Provide technical leadership for secure rollout of new services (VoLTE, IoT, 5G slicing)
 
 
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 
 Requirements
 
 
 
 
 
 What are we looking for and what does it require to be Telco Network Security Expert?
 
 
 <ul>
 <li>
 BS/MS in Telecom/Information Technology
 </li>
 <li>
 Practical experience of telecom network
 </li>
 </ul>
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5+ Years of experience in telecom security or core network operations
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Functional
 
 
 
 o&nbsp;&nbsp; Ability to organize, plan and document tasks;
 
 
 o&nbsp;&nbsp; Ability to manage internal &amp; external stakeholders;
 
 
 o&nbsp;&nbsp; Possess good logical and analytical skills to help in analysis of Cyber Security risks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Technical
 
 
 
 o&nbsp;&nbsp; Strong understanding of:
 
 
 &sect;&nbsp; SS7, SIGTRAN, Diameter, GTP, SIP
 
 
 &sect;&nbsp; LTE EPC and 5G Core architecture
 
 
 o&nbsp;&nbsp; Experience with roaming and interconnect security
 
 
 o&nbsp;&nbsp; Hands-on with:
 
 
 &sect;&nbsp; Network security (firewalls, IDS/IPS, DPI)
 
 
 &sect;&nbsp; SIEM platforms (Splunk, ELK, QRadar, etc.)
 
 
 &sect;&nbsp; Threat intelligence and incident response
 
 
 o&nbsp;&nbsp; Experience with:
 
 
 &sect;&nbsp; Kubernetes, Docker
 
 
 &sect;&nbsp; OpenStack / NFV environments
 
 
 &sect;&nbsp; API security and service mesh
 
 
 o&nbsp;&nbsp; Signaling Firewalls (e.g., Mobileum, Enea, Ericsson)
 
 
 o&nbsp;&nbsp; Fraud Management Systems
 
 
 o&nbsp;&nbsp; DDoS mitigation platforms
 
 
 o&nbsp;&nbsp; Packet capture and analysis tools
 
 
 
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Telco Network Security

geidea

<div>
 
 Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovation
 
 
 Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative &amp; Forward Thinkiking
 
 
 To maintain competitive advantage as we grow, we are currently looking for a new "
 
 Cybersecurity Defense Expert"
 
 
 
 
 
 
 
 Job purpose:
 
 
 
 The purpose of this role is to lead the defense against cyber threats through proactive SOC Monitoring, DFIR, Threat Intelligence, and Vulnerability Management, ensuring the integrity, confidentiality, and availability of information systems in all regions.
 
 
 
 
 
 
 Key accountabilities and decision ownership:
 
 
 <ul>
 <li>
 Lead and enhance SOC operations, focusing on real-time threat detection, incident response, and continuous monitoring.
 </li>
 <li>
 Coordinate digital forensics and incident response efforts to mitigate threats efficiently and reduce recovery time.
 </li>
 <li>
 Develop and implement a threat intelligence program to identify and counteract evolving cyber threat
 </li>
 <li>
 Manage the Vulnerability Management Program, including regular assessments, risk prioritization, and remediation strategies.
 </li>
 <li>
 Support the cybersecurity vision and strategy in alignment with defense operations and organizational goals.
 </li>
 <li>
 Oversee information security audits, whether by performed by organization or third-party personnel.
 </li>
 <li>
 Lead integration of standard and non-standard logs in SIEM.
 </li>
 <li>
 Create reports, dashboards, metrics for SOC operations and presentation to Senior Management.
 </li>
 <li>
 Lead team &amp; vendor management overall use of resources and initiation of corrective action where required for Security Operations Center.
 </li>
 <li>
 Develop and maintain enterprise Threat &amp; Vulnerability Management framework and necessary program operational capabilities that include identify, risk assess, and monitor of vulnerability and associated remediation.
 </li>
 <li>
 Maintain control effectiveness and continuously identify gaps in detection controls across the environment, including Geidea&rsquo;s cloud environments.
 </li>
 <li>
 Serve as the process owner of all ongoing activities related to the confidentiality, integrity and availability of information and resources of customers, business partners, employees, and business information, in compliance with the organization's Cyber and Information security policies.
 </li>
 <li>
 Evaluate team performance and build on people capabilities.
 </li>
 </ul>
 
 
 
 
 
 Must have technical / professional qualifications:
 
 
 <ul>
 <li>
 2-3 years of experience
 </li>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Technology, Telecommunications, Electronics &amp; Electrical or any related field.
 </li>
 <li>
 Certifications:
 </li>
 <li>
 GCIH
 </li>
 <li>
 GCFA
 </li>
 <li>
 Experience in cybersecurity architecture design.
 </li>
 <li>
 Experience in NESA IAR, SAMA CSF, PCI-DSS, NCA is a must.
 </li>
 </ul>
 
 
 
 
 Our values guide how we think and act - They describe what we care about the most.
 
 
 
 Customer first
 
 - It&rsquo;s embedded in our design thinking and customer service approach.
 
 
 
 Open
 
 - Openness allows us to constantly improve and evolve.
 
 
 
 Real
 
 - No jargon and no excuses!
 
 
 
 Bold
 
 - Constantly challenging ourselves and our way of thinking.
 
 
 
 Resilient
 
 &ndash; If we fail, we bounce back stronger than before.
 
 
 
 Collaborative
 
 - We know that we can achieve a lot more as a team.
 
 
 We are changing lives by constantly striving for a better solution.
 
 
 Click apply below and become part of the Geidea story
 
</div>

Cybersecurity Defense Expert

Canadian Solar Inc.

<div>
 
 
 At CS Power Systems, we're on a mission to transform lives by delivering clean, solar-powered electricity to millions worldwide&mdash;and we're just getting started.
 
 As a cutting-edge division of Canadian Solar, a global leader founded in 2001, we stand at the forefront of manufacturing high-performance solar panels, inverters, and advanced energy storage solutions. In this fast-growing, high-impact industry, our deep commitment to sustainability drives everything we do, creating innovative technologies that power a brighter, greener future.
 
 
 
 
 
 Across Canadian Solar's powerful ecosystem&mdash;including CS Power Systems, CSPowerTech, e-STORAGE, Recurrent Energy, MSS, and CSI Solar&mdash;we're deeply invested in our people's success. If you're passionate about renewable energy and want to
 
 "Make the Difference"
 
 by building a lasting positive impact on the planet and communities everywhere, join us at
 
 CS Power Systems
 
 &mdash;where your talent can help shape the clean energy revolution.
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 
 Monitor and manage physical security systemsaccess control, intrusion detection, and alarm systems.
 
 </li>
 <li>
 
 Conduct routine inspections of the facility to identify and mitigate potential security risks.
 
 </li>
 <li>
 
 Respond promptly to security incidents and alarms; conduct investigations and document findings.
 
 </li>
 <li>
 
 Maintain visitor and access logs; issue and track security badges and credentials.
 
 </li>
 <li>
 
 Collaborate with internal departments (IT, HR, Facilities) on security-related matters.
 
 </li>
 <li>
 
 Assist in developing and enforcing company security policies and procedures.
 
 </li>
 <li>
 
 Support emergency preparedness planning and participate in drills or response efforts.
 
 </li>
 <li>
 
 Maintain up-to-date knowledge of security threats and best practices.
 
 </li>
 <li>
 
 Train employees on security awareness and protocols as needed.
 
 </li>
 <li>
 
 Work with law enforcement or external agencies when required.
 
 </li>
 </ul>
 
 
 Qualifications:
 
 
 
 
 Required:
 
 
 <ul>
 <li>
 
 High school diploma or GED
 
 </li>
 <li>
 
 Level II Security or higher
 
 </li>
 <li>
 
 4-7 years of experience in corporate, military, or law enforcement security
 
 </li>
 <li>
 
 Working knowledge of physical security systems (CCTV, access control, etc.)
 
 </li>
 <li>
 
 Ability to work various shifts, including nights and weekends as needed
 
 </li>
 <li>
 
 Strong verbal and written communication skills
 
 </li>
 <li>
 
 Ability to remain calm in high-stress situations
 
 </li>
 </ul>
 
 
 Preferred:
 
 
 <ul>
 <li>
 
 Associate's or bachelor&rsquo;s degree in criminal justice, Security Management, or related field
 
 </li>
 <li>
 
 Relevant certifications (e.g., CPR, APP, or similar)
 
 </li>
 <li>
 
 Experience with basic and incident response
 
 </li>
 <li>
 
 Familiarity with OSHA and workplace safety protocols
 
 </li>
 <li>
 
 Require standing or walking for long periods
 
 </li>
 </ul>
 
 
 Working Conditions:
 
 
 <ul>
 <li>
 
 Possible exposure to outdoor weather conditions
 
 </li>
 <li>
 
 Ability to respond to emergencies at any hour
 
 </li>
 <li>
 
 Use of personal protective equipment (PPE) as required
 
 </li>
 </ul>
 
 #CSPowerSystems
 
 
 
</div>

Security Professional

NETS-International Group

<div>
 
 
 Job Overview
 
 
 
 
 
 
 This role defines architecture standards, leads platform integration across multi-vendor ecosystems, and ensures alignment with overall mission-critical network security objectives.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 - Define and own the end-to-end device and endpoint security architecture across mobile, IoT, and enterprise domains.
 
 
 - Architect integrations between EDR, MDM, MTD, and identity platforms for unified threat visibility and zero-trust enforcement.
 
 
 - Evaluate and implement device compliance frameworks aligned with NCA, CST, and ISO 27001 regulations.
 
 
 - Lead vendor assessments and proof-of-concepts for emerging endpoint protection technologies.
 
 
 - Provide guidance on IoT platform security configuration and network segmentation best practices.
 
 
 - Coordinate with other tower leads (Infrastructure, Data Security, and Digital Identity) for multi-domain alignment under ADC 450 MSS.
 
 
 - Act as design authority for endpoint control baselines, encryption standards, and secure access policies.
 
 
 - Oversee vulnerability remediation, patch orchestration, and posture management initiatives.
 
 
 - Mentor technical teams and drive continuous improvement of endpoint and IoT security capabilities.
 
 
 
 
 
 
 Required Qualifications
 
 
 
 
 
 
 - Bachelor&rsquo;s degree in Cybersecurity, Network Engineering, or related field.
 
 
 - Several years&rsquo; experience in endpoint, device, or IoT security architecture and operations.
 
 
 - Proven track record of leading enterprise-scale device security implementations and integrations.
 
 
 
 
 
 
 Required Certifications
 
 
 
 
 
 
 - Matrix42 Certified Architect or Microsoft Intune Expert.
 
 
 - CrowdStrike Certified Falcon Expert or SentinelOne Ranger Certification.
 
 
 - VMware Workspace ONE Architect or Ivanti Advanced Administrator.
 
 
 - CISSP, CCSP, or equivalent strategic security certification.
 
</div>

DTS Security Consultant

OneMain Financial

<div>The Threat &amp; Vulnerability Team Manager will be leading critical support for the Information Security&rsquo;s vulnerability management program (VM) for both the on-prem &amp; cloud environments managed by One Main Financial (OMF). They will help create a robust proactive approach for preventing unauthorized access, changes, or exploitation of vulnerabilities through mitigation, active defenses, and automated responses. The VM team&rsquo;s portfolio of activities includes providing vulnerability detection and remediation oversight, vulnerability research, secure baseline compliance, web application security, host-based security, network security, and acting as security subject matter experts for all the organization.
Required TVM Technical Competencies<ul><li>
Extensive knowledge and hands-on experience with a variety of Vulnerability Management Tools such as Tenable, DB Protect, Netsparker, Qualys, etc.</li><li>
Expert knowledge of the Vulnerability Management lifecycle</li><li>
Proven track record of designing, implementing, and managing a successful Threat &amp; Vulnerability Management Program</li><li>
Strong knowledge of networking, operating systems, databases, and web applications</li><li>
Strong knowledge of cybersecurity operations (Cyber Threat Intelligence, Penetration testing, &amp; Incident Response)</li><li>
Deep knowledge and experience of performing both manual and automated asset discovery and enumeration</li><li>
Deep knowledge and experience of systematic and data-driven asset prioritization</li><li>
Expert knowledge and successful application of risk management frameworks</li><li>
Required TVM Management Competencies</li><li>
Track record of leading enterprise-level vulnerability management teams with a history of increasing responsibility</li><li>
Expert project management skills</li><li>
Ability to explain vulnerability management concepts to a wide range of audiences verbally and in writing</li><li>
Expertise in developing and improving vulnerability management operations and processes</li><li>
Strong interpersonal skills and the ability to collaborate with a variety of stakeholders to ensure vulnerability management compliance</li><li>
Expert problem solving and critical thinking skills</li><li>
Proactive disposition and ability to execute on leadership vision with minimal oversight</li></ul>
Additional Responsibilities<ul><li>
Perform Project/Team Management activities, including assigning tasks, 1-1 coaching, upskilling junior team members, performance evaluations, etc.</li><li>
Lead the redesign, build and day-to-day operations of the vulnerability management (VM) team to include standardization of processes and managing customer expectations.</li><li>
Effectively manage a team of vulnerability management professionals who are focused on proactively preventing the exploitation of IT vulnerabilities that exist across the OMF environments.</li><li>
Successfully assign and complete VM projects, tasks, and\or initiatives on time and to vulnerability management standards.</li><li>
Track all team projects, tasks, and/or initiatives in a centralized location (e.g., Microsoft Lists, Jira, etc.) and provide a reportable schedule.</li><li>
Drive actionable metrics which help ensure the team reduce the time and resources needed to detect, investigate, analyze and remediate vulnerabilities.</li><li>
Manage performance of risk‐based assessments of current and emerging information security issues to support the mission by prioritizing remediation efforts.</li><li>
Proactively delegate support of regular vulnerability, compliance/configuration, database, and web application scanning.</li><li>
Apply effective problem solving and critical thinking skills to evaluate applicable solutions, conduct pilot/evaluations for proof of concepts and ultimately implement better mitigating controls.</li><li>
Research current and emerging information security exploits, threats, and vulnerabilities and disseminate contextual information to appropriate stakeholders.</li><li>
Facilitate exception handling, waiver processing and escalations as needed.</li><li>
Maintain regular communication with security leaderships on process optimization, tools tuning and resetting of VM priorities as business needs prudently recommend.</li></ul>
Minimum Qualifications<ul><li>
Bachelor's degree and 8+ years of related work experience; or a graduate degree and approximately 7-8 years of related work experience in the fields of Computer Science, Information Systems, Engineering, Business or related major</li><li>
A minimum of 6+ years of professional work experience in cybersecurity with at least 5 years in Vulnerability Management.</li><li>
3 or more years managing\supervising a team of vulnerability management professionals.</li><li>
Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.</li><li>
Experience in process definition, workflow design and process mapping</li><li>
Excellent interpersonal, written/verbal communication and leadership skills with the ability to make recommendations to all levels of the organization.</li></ul>
OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.</div>

Associate Director Info Security

Asian Global Infotech

Urgent Hiring &ndash; L3 Network Administrator (CCIE)Location: Dubai, UAE (Onsite &ndash; UCMC Dubai) Client: Healthcare Position Type: Full-Time Salary: upto AED 18,000 + Single Benefits Joining: Immediate to Maximum 1 Month Nationality: OpenProfiles with CCIE certification are mandatory.Job TitleSenior L3 Network Administrator / Network Architect (CCIE)Job SummaryWe are looking for a highly experienced L3 Network Engineer / Architect (8&ndash;10 years) with CCIE certification to lead enterprise network architecture, security, and cloud networking initiatives.The role demands deep expertise in security (Zero Trust), Azure networking (L3), and multi-vendor enterprise environments, along with the ability to handle critical escalations, architecture validation, and performance optimization.Key Responsibilities1. Network Architecture &amp; Design<ul><li>Act as the technical authority for enterprise and hybrid cloud network architecture.</li><li>Review and validate HLDs &amp; LLDs for complex network/security designs.</li><li>Drive scalability, resiliency, and performance improvements.</li><li>Lead architecture decisions across multi-vendor environments.</li></ul>2. Advanced Support &amp; Escalation Handling<ul><li>Serve as the final escalation point for critical network incidents.</li><li>Lead incident bridges and service restoration efforts.</li><li>Identify root causes and implement long-term stability improvements.</li></ul>3. Security &amp; Zero Trust Architecture<ul><li>Lead security design and firewall architecture including:</li><li>Palo Alto Firewalls (Expert Level)</li><li>Cisco Firepower Threat Defense (FTD)</li><li>Drive network segmentation &amp; Zero Trust implementation.</li><li>Ensure alignment with enterprise security standards &amp; compliance frameworks.</li></ul>4. Cloud &amp; Hybrid Networking (Azure &ndash; L3)<ul><li>Provide L3 support for:</li><li>VNet architecture, routing, UDRs, NSGs</li><li>Azure VPN Gateway &amp; hybrid connectivity</li><li>Ensure secure connectivity between on-prem and Azure environments.</li><li>Optimize cloud performance, availability, and security.</li></ul>5. Core Network Engineering<ul><li>Manage routing &amp; switching:</li><li>BGP, OSPF</li><li>SD-WAN, LAN/WAN optimization</li><li>Govern DNS, DHCP, and core network services.</li></ul>6. Cisco Ecosystem (Advanced Platforms)<ul><li>Provide expert-level support for:</li><li>Cisco DNA Center (DNAC) &ndash; automation &amp; analytics</li><li>Cisco ISE &ndash; NAC &amp; policy enforcement</li><li>Cisco WLC &ndash; enterprise wireless networks</li></ul>7. Load Balancing &amp; Application Delivery<ul><li>Architect and manage F5 Load Balancers:</li><li>Traffic management &amp; optimization</li><li>High availability and resilience</li></ul>8. Governance, Compliance &amp; Capacity Planning<ul><li>Lead capacity planning &amp; performance management.</li><li>Ensure audit readiness &amp; compliance across all network platforms.</li><li>Maintain architecture documentation and governance standards.</li></ul>9. Change Management &amp; Leadership<ul><li>Participate in / lead Change Advisory Board (CAB).</li><li>Approve high-risk network changes.</li><li>Mentor L2/L3 engineers and provide technical leadership.</li></ul>Required Skills &amp; ExperienceExperience<ul><li>8&ndash;10 years in enterprise network engineering</li><li>Proven experience in L3 / Architect-level roles</li><li>Experience in large-scale, mission-critical environments</li></ul>Mandatory Technical Skills<ul><li>✅ CCIE (Enterprise Infrastructure or Security) &ndash; Mandatory</li><li>✅ Palo Alto Firewalls (Expert &ndash; segmentation &amp; Zero Trust)</li><li>✅ Cisco Firepower Threat Defense (FTD)</li><li>✅ Microsoft Azure Networking (L3 Level)</li><li>✅ Cisco DNAC, ISE, WLC</li><li>✅ F5 Load Balancers</li><li>✅ Strong expertise in:</li><li>BGP, OSPF, SD-WAN</li><li>LAN/WAN technologies</li><li>DNS, DHCP</li></ul>CertificationsMandatory<ul><li>CCIE (Enterprise Infrastructure or Security)</li></ul>Preferred<ul><li>Palo Alto: PCNSE</li><li>Microsoft Azure: AZ-700</li><li>F5: Certified Administrator / Specialist</li><li>ITIL&reg; 4 Foundation</li></ul>Key Hiring Focus<ul><li>Strictly CCIE-certified candidates</li><li>Strong hands-on + architecture-level experience</li><li>Immediate or short notice candidates preferred</li></ul>Call to ActionSubmit relevant CVs at lakshmi@asianglobalinfotech.com &amp; Kavya@asianglobalinfotech.com ⚡ Priority goes to candidates with CCIE + Security + Azure + F5 expertiseJob Type: Full-timePay: Up to AED18,000.00 per monthApplication Question(s):<ul><li>Do you hold a valid CCIE certification (Enterprise Infrastructure or Security)?</li><li>How many years of experience do you have in L3 network engineering or network architecture?</li><li>Do you have hands-on experience with Palo Alto firewalls and network segmentation / Zero Trust?</li></ul>Brief details if Yes<ul><li>Do you have experience with Microsoft Azure networking (VNet, VPN Gateway, NSG, routing)?</li><li>Are you currently available to join within 1 month or less?</li></ul>Work Location: In person

L3 Network Administrator (CCIE)

Search 10000+ Security expert jobs near you this May. New roles added regularly across leading industries. Apply today.