Infrastructure Security Engineer, PAKISTAN

nsave is a London-based fintech company dedicated to protecting and growing the wealth of financially excluded individuals, particularly those in distressed economies with unstable banking systems and high inflation. Founded by Amer Baroudi and Abdallah AbuHashem, nsave offers a global platform providing trusted USD accounts, global payments, and investment services. Leveraging a compliance-by-design approach and proprietary technology, the company ensures secure and scalable financial solutions. With $22M raised from top investors like Sequoia Capital and Y Combinator, nsave is rapidly expanding and looking for a Security Engineer to join remotely from Pakistan on an independent contractor basis.

Key Responsibilities
- Own and continuously improve nsave’s information security program across infrastructure, applications, and operations.
- Lead the company through formal compliance certifications such as PCI DSS, SOC 2, and ISO 27001, managing the process from gap analysis to audit and accreditation.
- Design and secure the AWS Organization and multi-account structure, enforcing least-privilege access and managing cloud network security using infrastructure as code (Terraform).
- Manage endpoint security for a remote workforce, including device management, endpoint detection and response (EDR), patching, and hardening standards.
- Collaborate with backend and platform engineers to embed security into the software development lifecycle through code reviews, threat modeling, secrets management, dependency scanning, and CI/CD pipeline security.
- Maintain the risk register, lead incident response efforts, and conduct post-mortems to implement lasting improvements.
- Assess and monitor the security posture of third-party vendors and partners to ensure compliance with regulated financial platform standards.
- Promote a security-first culture by conducting internal training and championing secure-by-default practices across the organization.

Required Qualifications
- Proven hands-on experience designing and building AWS Organizations, including multi-account structures, Organizational Units, Service Control Policies, and least-privilege IAM configurations.
- Deep expertise in cloud network security, including VPC design, segmentation, security groups, NACLs, private connectivity, and protections such as WAF and DDoS mitigation.
- Strong proficiency with Terraform for defining infrastructure and security controls as code, integrating guardrails into CI/CD pipelines.
- Experience securing endpoints in a remote environment, including EDR, device management (MDM), patching, disk encryption, and hardening baselines.
- Background in fintech, banking, or payments, ideally within regulated industries, with a solid understanding of risk, data privacy, and compliance requirements.
- Excellent communication skills, able to translate complex technical risks into clear language for non-technical stakeholders and auditors.
- Proactive mindset with strong ownership, capable of identifying and mitigating security risks independently.

Preferred Qualifications and Benefits
- Experience working in or setting up a Security Operations Centre (SOC), including SIEM, log monitoring, alerting, threat detection, and incident response.
- Hands-on experience guiding companies through compliance certifications such as PCI DSS, SOC 2, or ISO 27001, including control design and audit preparation.
- Opportunity to work in a fast-growing, mission-driven fintech startup backed by leading investors.
- Remote work flexibility based in Pakistan with an independent contractor engagement.
- A culture that values mission-first service, urgency, ownership, and high standards.
- Equal opportunity employer welcoming candidates from diverse backgrounds without discrimination.

Candidates should be deeply motivated by nsave’s mission, thrive in high-ownership and high-accountability environments, and be comfortable working with urgency and ambiguity. This role is ideal for someone eager to build secure fintech infrastructure from first principles in an early-stage, high-growth company. Contractors are responsible for their own taxes, insurance, and statutory obligations.