WE ARE HIRING!

Location: Karachi
Department: Information Security
Position Title: Manager Infrastructure Security
Qualification:
. Bachelor's degree in Information/Cyber Security, Computer Science, or Engineering.
. Preferred Certifications: Comp TIA Security+, CEH, CISM, CEH, Microsoft certifications will be a plus.
Experience:
. Hands-on experience with security assessment tools.
. Minimum 4-5 years of technical experience in cybersecurity infrastructure and threat engineering.

Roles and Responsibilities:
. Establish infrastructure hardening baselines using CIS benchmarks and validate compliance through CIS scanning across operating systems (OS) and virtualization infrastructure.
. Conduct comprehensive Vulnerability Assessment (VA) programs across OS and network levels, evaluate threat severity, and oversee risk-mitigation strategies.
. Architect and review security policies and access controls for firewalls, network devices. DNS structures, and email/ Exchange infrastructure.
. Define security controls and trust boundaries for Active Directory (AD) architectures and Privileged Access Management (PAM) frameworks.
. Design and oversee Data Loss Prevention (DLP) strategies to safeguard sensitive financial data from unauthorized exposure.
. Set security standards for remote connections by driving the strategy and architecture for VPNs and Zero Trust Network Access (ZTNA).
. Lead a team of security experts, direct infrastructure risk assessments, and evaluate Network Detection and Response (NDR) telemetry to mitigate systemic risks.
. Good knowledge of Excel and PowerPoint for creating professional documentation.
. Strong analytical, communication, and problem-solving skills.