SecOps Engineer

About the role

We are looking for a SecOps Engineer to support secure software development, security monitoring, and governance initiatives. The role is hands‑on and based on‑site in Karachi, working closely with engineering, SOC and management teams to ensure applications and cloud environments meet our security standards.

Key responsibilities

• Support secure SDLC activities and perform secure code reviews.
• Execute and manage SAST, DAST and SCA scans, track remediation.
• Assist with threat modeling and document security risks.
• Integrate security into CI/CD pipelines, manage secrets and verify configurations.
• Conduct cloud security reviews and validate access controls in AWS and Azure.
• Support SOC operations: monitor alerts, assist investigations and track incidents.
• Participate in compliance activities such as PCI‑DSS and ISO 27001 audits, governance and risk registers.
• Contribute to vulnerability management and security awareness programs.

Required profile

• Strong background in application and web/API security.
• Experience with security scanning tools (SAST, DAST, SCA).
• Hands‑on experience integrating security into CI/CD and managing secrets.
• Knowledge of cloud security concepts and access‑control validation for AWS or Azure.
• Familiarity with threat modeling, vulnerability management and SOC collaboration.
• Excellent communication, documentation and reporting skills.
• Preferred exposure to PCI‑DSS, ISO 27001, container security and Azure security.

Required skills

• Application security
• Web/API security
• SAST
• DAST
• SCA
• CI/CD security integration
• Secret management
• AWS
• Azure
• Cloud security
• Access control validation
• Threat modeling
• Vulnerability management
• SOC alert monitoring
• Incident support
• PCI‑DSS
• ISO 27001
• Container security

What we offer

• Incentive bonus
• Medical coverage
• Transport allowance