Infrastructure Security Engineer (Remote, Pakistan)

About the role

nsave, a fintech company based in London, is hiring an Infrastructure Security Engineer to work remotely from Pakistan. As its Security Engineer, you will own security end-to-end, from cloud infrastructure hardening to driving formal compliance certifications, working closely with the CTO. The role is offered on a freelance / independent contractor basis; contractors are not employees and are responsible for their own taxes, insurance and statutory obligations.

Key responsibilities

• Own the security posture: define, implement and continuously improve the information security programme across infrastructure, application and operational layers.
• Lead compliance certifications (PCI DSS, SOC 2, ISO 27001), from gap analysis through audit and accreditation.
• Design and secure the AWS Organization and account structure, enforcing least-privilege access and securing the cloud network, managed as code in Terraform.
• Own endpoint security across the remote team: device management, EDR and hardening standards for laptops touching production.
• Embed security in engineering: partner with backend and platform engineers on code reviews, threat modelling, secrets management, dependency scanning and CI/CD pipeline security.
• Maintain the risk register, lead incident response when needed and run post-mortems.
• Assess the security of third-party tools and partners, and run internal training to build a security-first culture.

Required profile

• Fintech, banking or payments background, ideally in a regulated environment, understanding the associated risks, data privacy and compliance obligations.
• Hands-on security engineer, not just an auditor: able to write policy and pass audits while also fixing infrastructure gaps.
• Clear communicator who can explain technical risk to non-technical stakeholders, leadership and auditors.
• Proactive and ownership-driven, comfortable with urgency and ambiguity in an early-stage, high-growth company.

Required skills

• AWS Organizations: multi-account structure, Organizational Units, Service Control Policies and least-privilege IAM.
• Cloud network security: VPC design and segmentation, security groups and NACLs, private connectivity, WAF and DDoS protection.
• Infrastructure as code: strong hands-on Terraform experience, with security guardrails in CI/CD.
• Endpoint security: EDR, MDM, hardening baselines, patching and disk encryption.
• Nice to have: SOC experience (SIEM, log monitoring, alerting, incident response) and experience with PCI DSS, SOC 2 or ISO 27001.