Sr. Info Security Engineer
Job details
Position:Sr. Info Security Engineer
Location:Karachi, Lahore, Islamabad, Peshawar, PakistanJob Id:2182
# of Openings:5
About Afiniti
At Afiniti, we are a leading provider of artificial intelligence technology that elevates the customer experience by making moments of human connection more valuable. Our mission is rooted in a simple yet powerful idea: understanding patterns of human behavior enables us to predict how people will interact and create meaningful connections.
Using our patented AI technology, we revolutionize the contact center industry by pairing customers with the most compatible contact center agents. By doing so, we enhance the entire customer journey, resulting in exceptional experiences and improved outcomes for all parties involved.
Our transformative technology has generated billions of dollars in incremental value for our esteemed clients, which include Fortune 500 companies across diverse industries such as financial services, telecommunications, travel, and hospitality. We take pride in our global reach and impact, with our solutions being leveraged by organizations around the world.
To learn more about Afiniti and the groundbreaking work we do, visitwww.afiniti.com .
About the role
Sr. Info Security Engineer - Pakistan
Afiniti Enterprise Security (EntSec) team seeks an experienced, motivated Security Engineer. This position will be based in Pakistan.
This is a broad information security role, combining security management and security engineering capabilities. You will be primarily responsible for defining strategies for threat detection, alerting and response and implementing these strategies in cooperation with engineering teams. You will also support development of Afiniti's information security program to drive ever-higher levels of program maturity, including supporting client assurance and security certification attainment.
Key Responsibilities
This role requires an individual with a sufficient technical background, a solid understanding of data security, and a demonstrated knowledge of threat detection strategies.
The Security Engineer will be responsible for developing and maintaining a comprehensive internal threat detection program.
The successful candidate is an established security leader who obsesses over internal threat detection.
This position is responsible for designing detections/alerts, modelling internal threats, and reducing the risk insiders can pose to Afiniti.
The role will translate insider threat use cases into technical monitoring, detection, and alerting mechanisms.
They can analyse log sources from a variety of applications and systems to identify the appropriate inputs and models for detecting potential insider threats.
The Enterprise Security Engineer should also be well versed in evolving information security programs to attain a high level of maturity.
This position carries the responsibility to ensure the timely identification, remediation and tracking of technical, procedural and policy-based items that may impact security.
This position will ensure effective communication with business, technical, and non-technical partners and identify trends and insights based upon data to drive continual security program improvements.
Minimum Qualifications
Bachelor's degree in Computer Science, Information Technology, or similarly related area of study required
Industry security certifications (e.g., CISSP, CISM, CISA, CCSP, etc.)
Minimum 5 years Information Security experience
Comprehensive knowledge of information security principles, protocols, practices and industry standards
Strong understanding of existing and emerging information security technologies
Experience with some or all of the following security tools:
DTEX
Rapid7 - IVM, IDR, Threat Command
Qualys (IP Scanner + Web application Scanner - PCI ASV)
Tenable IP Scanner (PCI ASV)
Shodan
3 years of demonstrated experience in security content development, log source analysis, threat modelling or related fields
5 years of demonstrated experience in areas such as internal threat (aka insider threat), digital forensics, or internal investigations
Excellent written and verbal communication skills to communicate security and business risk to a broad range of technical and non-technical audiences
Excellent analytical skills, organizational, time management, and problem-solving skills
Advanced report writing skills
Preferred Qualifications
Experienced working with and presenting technical issues to senior leadership
Experience with security compliance testing
Strong global acumen (experienced in working with international teams)
Strong desire to learn (especially data science concepts)
Skilled at creative problem solving and breaking problems into achievable parts
Skilled at collaborating closely with team members
Previous technical leadership experience
Experience designing and building for User and Entity Behavioral Analytics (UEBA) or User Activity Monitoring (UAM) solutions
Experience with the Software Development Lifecycle
Hands-on experience with Cloud Technologies - AWS Preferred (EC2, ELB, RDS, Route53, CloudFront, S3)
Experience in Data Sciences, Machine Learning, or Artificial Intelligence is a plus
This is a hybrid opportunity required to work in EST Hours#J-18808-Ljbffr
Apply safely
To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.
