Senior Cyber Security Engineer

Cybersoft North America Inc., established in 1996 as a virtual startup and spin-off from Applied Research Technologies, Incorporated, has evolved into a reputable provider of software solutions and tools. The company serves diverse markets including Artificial Intelligence (with a focus on Machine Learning and model operationalization), Financial Services (specifically Accounts Receivable Management), and enterprise workflow-based web applications. Cybersoft also specializes in Internet of Things (IoT) and cross-platform mobile applications, maintaining a strong commitment to innovation and quality. Employees engage with modern technologies across various industries, contributing to scalable, real-world solutions while embracing technical excellence, collaboration, and continuous learning.

The Senior Cyber Security Engineer role is a full-time, on-site position based in Lahore. This role is responsible for designing, implementing, and maintaining security controls across applications, networks, and systems. The engineer will conduct security assessments, monitor for threats and vulnerabilities, analyze security incidents, and coordinate remediation efforts with engineering and infrastructure teams. Additionally, the role involves developing and enforcing security policies and standards, performing regular vulnerability assessments and penetration tests, and supporting secure software development practices. Collaboration with cross-functional stakeholders to ensure regulatory and internal compliance is essential, as is preparing security documentation and reports. The Senior Cyber Security Engineer will also mentor junior team members and proactively contribute to enhancing the organization’s security posture against evolving threats.

Key Responsibilities

- Design, implement, and maintain security controls for applications, networks, and systems.
- Perform security assessments, vulnerability scans, and penetration testing regularly.
- Monitor security threats and analyze security incidents to coordinate timely remediation.
- Develop, enforce, and update security policies, standards, and procedures.
- Support secure software development lifecycle (SDLC) practices and conduct security code reviews.
- Collaborate with engineering, infrastructure, and compliance teams to ensure adherence to regulatory requirements.
- Prepare detailed security documentation, reports, and risk assessments for internal and external stakeholders.
- Mentor and guide junior cybersecurity team members on best practices and emerging threats.
- Drive continuous improvement initiatives to strengthen the organization’s cybersecurity resilience.

Required Qualifications

- Strong expertise in Cybersecurity and Information Security, including security frameworks, risk management, and governance.
- Proficient in Network Security concepts such as secure network design, firewalls, VPNs, IDS/IPS, and network monitoring tools.
- Experience in Application Security, including secure coding practices, code review, security testing (SAST/DAST), and integrating security into the SDLC.
- Skilled in Vulnerability Assessment processes, including scanning, risk prioritization, remediation planning, and reporting.
- Familiarity with security standards and regulations such as ISO 27001, NIST, PCI-DSS, GDPR, or similar frameworks.
- Proficiency with common security tools including SIEM, endpoint protection, web application firewalls, and penetration testing tools.
- Strong analytical and problem-solving skills, with the ability to communicate complex security issues effectively to both technical and non-technical audiences.
- Bachelor’s degree in Computer Science, Information Security, or a related field.

Preferred Qualifications and Benefits

- Advanced certifications such as CISSP, CISM, OSCP, CEH, or equivalent are highly desirable.
- Previous experience in a senior or lead security engineering role, including mentoring and leading teams.
- Opportunity to work with cutting-edge technologies in a collaborative and innovative environment.
- Engagement with diverse industries and complex security challenges, fostering professional growth and continuous learning.

This position offers a unique opportunity to contribute significantly to the cybersecurity strategy of a well-established and innovative company.