Senior Cyber Security Engineer

Cybersoft North America Inc., established in 1996 as a virtual startup and spin-off from Applied Research Technologies, Incorporated, has evolved into a reputable provider of innovative software solutions. Serving diverse sectors such as Artificial Intelligence, Financial Services, and enterprise workflow-based web applications, the company also specializes in Internet of Things (IoT) and cross-platform mobile applications. Cybersoft is committed to delivering high-quality products while fostering a culture of technical excellence, collaboration, and continuous learning.

The Senior Cyber Security Engineer role is a full-time, on-site position based in Lahore. This role focuses on designing, implementing, and maintaining comprehensive security controls across applications, networks, and systems. The engineer will conduct security assessments, monitor for threats and vulnerabilities, analyze incidents, and coordinate remediation efforts with engineering and infrastructure teams. Additionally, the position involves developing and enforcing security policies and standards, performing regular vulnerability assessments and penetration tests, and supporting secure software development lifecycle practices. Collaboration with cross-functional teams is essential to ensure compliance with regulatory and internal security requirements. The role also includes preparing security documentation and reports, as well as mentoring junior team members to promote cybersecurity best practices. A proactive approach to enhancing the organization’s security posture and resilience against emerging threats is critical.

Key Responsibilities

- Design, implement, and maintain security controls across applications, networks, and systems.
- Perform regular security assessments, vulnerability scans, and penetration tests to identify and mitigate risks.
- Monitor security threats and analyze security incidents, coordinating timely remediation with relevant teams.
- Develop, enforce, and update security policies, standards, and procedures.
- Support secure software development practices by integrating security into the SDLC.
- Collaborate with cross-functional stakeholders to ensure compliance with regulatory frameworks and internal policies.
- Prepare detailed security documentation, reports, and risk assessments for management and auditors.
- Mentor and guide junior cybersecurity team members, fostering knowledge sharing and best practices.
- Stay current with evolving cybersecurity threats, technologies, and industry trends to continuously improve security posture.

Required Qualifications

- Strong expertise in Cybersecurity and Information Security, including familiarity with security frameworks, risk management, and governance.
- Proficient in Network Security concepts such as secure network design, firewalls, VPNs, IDS/IPS, and network monitoring tools.
- Experience in Application Security, including secure coding practices, code review, security testing (SAST/DAST), and SDLC integration.
- Skilled in Vulnerability Assessment processes, including scanning, risk prioritization, remediation planning, and reporting.
- Knowledge of security standards and regulations such as ISO 27001, NIST, PCI-DSS, GDPR, or similar frameworks.
- Ability to use common security tools like SIEM, endpoint protection, web application firewalls, and penetration testing utilities.
- Strong analytical and problem-solving skills with the ability to communicate complex security issues clearly to both technical and non-technical audiences.
- Bachelor’s degree in Computer Science, Information Security, or a related discipline.

Preferred Qualifications and Benefits

- Advanced certifications such as CISSP, CISM, OSCP, CEH, or equivalent are highly desirable.
- Previous experience in a senior or lead security engineering role, including mentoring and team leadership responsibilities.
- Opportunity to work with cutting-edge technologies across multiple industries in a collaborative and growth-oriented environment.
- Engagement in continuous learning and professional development to stay ahead in the cybersecurity field.

This position offers a challenging and rewarding opportunity to contribute significantly to the security and success of a dynamic software solutions provider.