Senior Cybersecurity Engineer – Cloud & IT Infrastructure Security

Senior Cybersecurity Engineer – Cloud & IT Infrastructure Security

Company: Ninety-Nine Technologies Pvt. Ltd.
Location: Bahria Town, Islamabad, Pakistan
Work Arrangement: Onsite
Job Type: Full-Time
Experience Required: 5–8 Years

Job Overview

Ninety-Nine Technologies is seeking an experienced Senior Cybersecurity Engineer to strengthen and manage security across our applications, cloud infrastructure, on-premises systems, and security operations.

The ideal candidate will have hands-on experience in application security, AWS security, IT infrastructure protection, vulnerability management, incident response, and security compliance. You will work onsite with our engineering, DevOps, and leadership teams to identify risks, implement security controls, and protect the organization's systems and data.

Key Responsibilities

• Conduct security assessments, threat modeling, and secure code reviews.
• Identify and address web application and API vulnerabilities, including OWASP Top 10 risks.
• Integrate SAST, DAST, software composition analysis (SCA), and secrets scanning into CI/CD pipelines.
• Secure AWS and on-premises IT infrastructure, including identity and access management, network segmentation, and encryption.
• Review Infrastructure-as-Code, container, and Kubernetes configurations for security risks.
• Manage vulnerability scanning, risk prioritization, patch management, and remediation.
• Configure and maintain security monitoring, detection rules, and alerts using Wazuh or similar SIEM tools.
• Lead security incident investigations, containment, recovery, and post-incident reporting.
• Maintain incident response procedures and conduct security exercises.
• Support ISO 27001 and SOC 2 compliance, audits, risk assessments, and security documentation.
• Conduct third-party security reviews and employee security awareness training.

Required Qualifications

• 5–8 years of hands-on experience in cybersecurity or security engineering.
• Strong understanding of application security, web vulnerabilities, API security, and secure coding practices.
• Practical experience securing AWS services, including IAM, VPC, CloudTrail, GuardDuty, and Security Hub.
• Experience securing on-premises servers, networks, and identity systems.
• Knowledge of CI/CD security tools, containers, and Infrastructure-as-Code.
• Hands-on experience with SIEM solutions and security incident response; Wazuh experience is preferred.
• Working knowledge of ISO 27001 and/or SOC 2 controls and audits.
• Scripting skills in Python, Bash, or similar languages.
• Strong analytical, troubleshooting, and communication skills.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

Preferred Qualifications

• Certifications such as OSCP, CISSP, CCSP, AWS Security Specialty, or ISO 27001 Lead Implementer/Auditor.
• Experience developing security programs within growing organizations.
• Knowledge of Kubernetes security and service mesh technologies.
• Previous experience in software development or DevOps.
• Familiarity with GDPR and applicable data protection regulations.

What We Offer

• Competitive salary package.
• Onsite work environment with direct collaboration across technical teams.
• Professional training and certification opportunities.
• The opportunity to take ownership of cybersecurity initiatives across the organization.

How to Apply

Interested candidates should email their CV along with a brief description of a security problem they have successfully solved to [email protected].

Email Subject: Senior Cybersecurity Engineer – Cloud & IT Infrastructure Security

Work Location: In person