Senior Cyber Security Engineer

About the role

Cybersoft North America Inc. is hiring a full-time, on-site Senior Cyber Security Engineer in Lahore. The engineer designs, implements and maintains security controls across applications, networks and systems, working with engineering and infrastructure teams to improve the organisation's security posture.

Key responsibilities

• Perform security assessments, monitor for threats and vulnerabilities, analyse security incidents and coordinate remediation with engineering and infrastructure teams.
• Develop and enforce security policies and standards, and conduct regular vulnerability assessments and penetration tests.
• Support secure software development practices and help ensure regulatory and internal compliance.
• Prepare security documentation and reports, and mentor junior team members on cybersecurity best practices.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field; advanced certifications such as CISSP, CISM, OSCP, CEH or equivalent are a plus.
• Experience in a senior or lead security engineering role, mentoring teammates and driving security initiatives.
• Strong analytical and problem-solving abilities, with the ability to explain complex security issues to technical and non-technical stakeholders.

Required skills

• Cybersecurity and information security, including security frameworks, risk management and security governance.
• Network security: secure network design, firewalls, VPNs, IDS/IPS and network monitoring tools.
• Application security: secure coding, code review, SAST/DAST testing and security in the SDLC.
• Vulnerability assessment: scanning, risk prioritisation, remediation planning and reporting.
• Relevant experience with standards such as ISO 27001, NIST, PCI-DSS or GDPR is beneficial; proficiency with SIEM, endpoint protection, WAFs and penetration testing tools is preferred.