System & Network Security Engineer

Employment Type: Full-time
Location: Township, Lahore - Onsite
Working Hours: 6:00 PM - 3:00 AM PKT, aligned with US Central Time
Function: Information Technology

Job Summary
The System & Network Security Engineer is responsible for implementing, maintaining and reviewing security controls across enterprise systems, endpoints, networks and infrastructure platforms.

The role provides dedicated technical focus on endpoint security, firewall security, vulnerability management, patch-compliance assurance, password and credential security, infrastructure hardening and email/web security. The position works closely with Infrastructure & Engineering, SOC and NOC teams while maintaining clear role boundaries.

Key Responsibilities

• Administer and maintain security controls across systems, endpoints, networks and infrastructure platforms.
• Manage EDR and antimalware platforms including policies, coverage, exclusions, agent health and security configurations.
• Perform vulnerability scanning, validate findings and track remediation through closure.
• Monitor patch compliance across servers, endpoints and applicable infrastructure.
• Maintain security-hardening standards for Windows/Linux systems, endpoints, network devices and firewalls.
• Identify security control gaps and coordinate remediation with Systems, Network and Infrastructure teams.
• Validate remediation and escalate overdue critical or high-risk findings.
• Review infrastructure changes for applicable security requirements and configuration risks.
• Maintain technical security documentation, configuration standards, exception records and audit evidence.

Vulnerability, Patch and Security Assurance

• Perform scheduled vulnerability assessments and prioritize findings based on severity, exploitability, exposure and business impact.
• Track vulnerabilities against defined remediation timelines then rescan and validate closure.
• Monitor patch-compliance status and identify systems with missing or overdue security updates.
• Conduct periodic security configuration and hardening reviews.
• Support ISO 27001, HIPAA and internal or external audit requirements within the assigned technical scope.

Endpoint, Network and Access Security

• Maintain EDR and antimalware coverage across supported endpoints and servers and investigate coverage or policy gaps.
• Review firewall rules, VPN security and network segmentation and identify obsolete, excessive or unnecessary access.
• Coordinate approved security changes with Systems and Network Engineering.
• Administer password vault and applicable PAM controls and review privileged or administrative access.
• Support credential rotation, emergency access and break-glass controls.
• Apply least privilege and segregation of duties to privileged-access controls.

Email and Web Security

• Maintain and review anti-phishing, attachment protection, URL protection, web filtering and DNS security controls where implemented.
• Investigate configuration gaps, coordinate corrective actions and maintain approved security exceptions.

Role Interfaces and Boundaries

• Infrastructure & Engineering retains infrastructure architecture, systems and network operations, patch deployment and implementation of approved changes.
• SOC retains SIEM, security monitoring, detection and incident response. NOC retains availability, performance monitoring and operational alerting.
• The System & Network Security Engineer implements, reviews and validates assigned infrastructure security controls and coordinates remediation with the responsible technical teams.

Required Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Information Security, Engineering or a related discipline. Equivalent relevant experience may be considered.
• 4-5 years of relevant experience in system, network or infrastructure security.
• Hands-on experience with EDR, endpoint protection, enterprise firewalls and vulnerability-management tools.
• Experience with Windows Server, Active Directory, Windows endpoints, network security and working knowledge of Linux security.
• Experience with vulnerability assessment, patch compliance, security hardening and remediation tracking.
• Experience with firewall policies, VPN security, network segmentation and privileged access.
• Familiarity with password vault/PAM technologies and email/web security controls.
• Good troubleshooting, documentation and analytical skills.
• Understanding of least privilege, segregation of duties and security-control evidence.

Preferred Qualifications

• Experience in healthcare, financial services or another regulated environment.
• Familiarity with ISO 27001 and HIPAA security requirements.
• Relevant certifications such as Security+, CySA+, Fortinet, Microsoft Security, Cisco Security or equivalent are preferred.

Work Location: In person