business analyst

data analyst

research analyst

senior data analyst

analyst, information security Jobs in Karachi

analyst, information security

analyst information security

Datamatics Global Services Ltd

<div><h1 class="jobSectionHeader">System Analyst (3&ndash;11+ Years Experience)</h1><h2 class="jobSectionHeader">
Job Title: System Analyst</h2><h2 class="jobSectionHeader">
Experience: 3&ndash;11+ Years</h2><h2 class="jobSectionHeader">
Location: Riyadh, Saudi Arabia</h2><h2 class="jobSectionHeader">
Job Summary</h2>
We are seeking a detail-oriented System Analyst to analyze business and technical requirements, design system solutions, and support successful implementation of enterprise applications. The ideal candidate will have experience in translating business needs into functional and technical specifications, evaluating system impacts, and ensuring implementation readiness while working closely with business stakeholders, developers, QA teams, and project managers.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Gather, analyze, and document business and system requirements.</li><li>
Develop functional and non-functional specifications for new systems and enhancements.</li><li>
Collaborate with business stakeholders, architects, developers, and QA teams to define solution designs.</li><li>
Perform system design analysis and recommend scalable, efficient solutions.</li><li>
Conduct change impact analysis for system enhancements and new implementations.</li><li>
Support implementation planning, deployment readiness, and post-implementation validation.</li><li>
Create process flows, system workflows, interface specifications, and technical documentation.</li><li>
Participate in solution reviews, testing, defect resolution, and production support.</li><li>
Ensure system solutions align with business objectives, security standards, and organizational policies.</li></ul><h2 class="jobSectionHeader">
Must Have Skills</h2><ul><li>
Experience in Functional Specifications AND Non-Functional Specifications AND System Design AND Change Impact Analysis AND Implementation Readiness.</li><li>
Requirements documentation: BRD OR FRD OR Functional Specifications OR Technical Specifications OR Use Cases.</li><li>
System modeling: UML OR BPMN OR Process Flow Diagrams OR Sequence Diagrams OR Data Flow Diagrams (DFD).</li><li>
Project methodologies: Agile OR Scrum OR Waterfall OR Hybrid.</li><li>
Collaboration and documentation tools: Jira OR Azure DevOps OR Confluence OR Microsoft Visio OR Lucidchart.</li><li>
System Analysis AND Requirement Analysis AND Solution Design.</li><li>
Stakeholder Management AND Gap Analysis AND Root Cause Analysis.</li><li>
Strong analytical, troubleshooting, communication, and documentation skills.</li><li>
Experience collaborating with cross-functional technical and business teams.</li></ul><h2 class="jobSectionHeader">
Good to Have Skills</h2><ul><li>
Knowledge of SQL OR Oracle SQL OR Microsoft SQL Server.</li><li>
Experience with REST APIs OR SOAP APIs OR Microservices.</li><li>
Familiarity with SDLC OR DevOps OR CI/CD processes.</li><li>
Experience with AWS OR Azure OR Google Cloud Platform (GCP).</li><li>
Understanding of system integration, data migration, and interface design.</li><li>
Knowledge of security, performance, scalability, and availability principles.</li><li>
Certifications such as ITIL OR TOGAF OR CBAP OR CCBA.</li><li>
Experience supporting enterprise applications, ERP, CRM, or digital transformation initiatives.</li></ul><h2 class="jobSectionHeader">
Preferred Qualifications</h2><ul><li>
Bachelor's degree in Computer Science, Information Technology, Software Engineering, or a related field.</li><li>
3&ndash;11 years of experience as a System Analyst, Technical Business Analyst, or Solution Analyst.</li><li>
Proven experience translating business requirements into scalable system solutions.</li><li>
Excellent communication, documentation, problem-solving, and stakeholder management skills.</li><li>
Ability to manage multiple priorities in a fast-paced, collaborative environment.</li></ul>
URp6OnrY6F</div>

System Analyst

Shark Innovation Labs

We at Shark Innovation Labs want to expand our team and are looking for recent graduates' industrial engineers for the position of &quot; Process Analyst&quot;.Responsibilities:&middot; Interact with key stakeholders to get the requirements.&middot; Elicit and clearly document business and systems requirements.&middot; Analyze current (&quot;as-is&quot;) business processes across various functions.&middot; Design and propose optimized (&quot;to-be&quot;) processes for improved efficiency and effectiveness.&middot; Document as-is and to-be processes, including process maps and standard operating procedures (SOPs).&middot; Lead the implementation of new processes, ensuring smooth integration.&middot; Take ownership of to-be processes, monitoring and refining them as needed.&middot; Establish metrics and KPIs to track process performance and outcomes.&middot; Identify opportunities for continuous process improvement.&middot; Collaborate with cross-functional teams for process alignment and support.&middot; Provide regular updates and reports on process performance.&middot; Assist in training team members and provide ongoing support for process adoption.&middot; Serve as a liaison between stakeholder and delivery team to assist or gather business requirements needed for system modifications, enhancement, and implementations.&middot; Create and maintain meeting minutes, meeting schedules, project summaries, and updates.Requirements:&middot; Fresh graduates having bachelor's degree in Industrial Engineering.&middot; Proficient in using analytical programs, spreadsheet software and flow-charting tools &amp; Process Optimization Techniques (like Microsoft Excel, Microsoft Power BI, Lucid Charts, Balsamiq etc.).&middot; Strong analytical and troubleshooting skills&middot; Excellent verbal and documentation skills.&middot; Ability to Understand Delegated Objectives.&middot; Able to professionally conduct meetings with key stakeholders.&middot; Diligent with objectives and time management.Job Type: Full-timePay: Rs70,000.00 - Rs80,000.00 per monthWork Location: In person

Process Analyst (ERP Frappe, HR Module)

Careem

<div><div>Careem is building the Everything App for the greater Middle East &mdash; making it easy to move around, order food and groceries, manage payments, and more. Our purpose is simple: to simplify and improve people's lives and build an awesome organisation that inspires. 
Since 2012, Careem has enabled earnings for over 2.5 million Captains, simplified the lives of more than 70 million customers, and built a platform where the region's best talent and entrepreneurs thrive. We operate in 70+ cities across 10 countries, from Morocco to Pakistan.

We're now entering our next chapter &mdash; one powered by AI. We're looking for AI talent: curious problem-solvers who know how to apply AI to build tools, automate workflows, and create real impact. Whether it's streamlining operations, enhancing customer experience, or reimagining internal systems &mdash; we want people who can make Careem work smarter and move faster.</div> 

<div>
About the Role 
 
We are looking for a Senior Security Engineer II to join our Security Engineering team. This is a hands-on, high-ownership role for someone who thrives at the intersection of cloud security, infrastructure hardening, and agentic/AI security. You'll be expected to independently drive security initiatives across a large-scale, multi-vertical tech organization - not just advise, but build, ship, and operate. 
 
What You'll Do</div>
<div> 
Cloud &amp; Infrastructure Security</div>
<ul><li>Own and drive cloud security posture across AWS environments (EC2, EBS, IAM, GuardDuty, Bottlerocket, Beanstalk) including enforcement of encryption-by-default, golden AMI pipelines, and auto-remediation frameworks.</li>
<li>Build and maintain hardened golden images; manage CVE patching pipelines and track fleet-wide vulnerability remediation health.</li>
<li>Own KSPM (Kubernetes Security Posture Management) and CSPM controls; lead contingency planning and incident response for infrastructure-level vulnerabilities.</li>
<li>Report on server hardening KPIs, vulnerability patching health, and compliant network security controls for executive/compliance audiences.</li>
</ul><div>Edge &amp; Network Security (Cloudflare)</div>
<ul><li>Manage SSL/TLS certificate health, TLS version enforcement, and bot traffic analysis across production domains.</li>
<li>Analyze and respond to anomalies, bot vs human traffic breakdowns, DDoS patterns, firewall rule tuning.</li>
<li>Investigate CDN misconfigurations and drive root-cause analysis and mitigation for HackerOne-reported issues.</li>
</ul><div>DDoS Simulation &amp; Resilience Testing</div>
<ul><li>Lead and operate DDoS simulation tooling (e.g., Kratos) across business verticals in collaboration with QA and SRE teams.</li>
<li>Integrate simulation platforms into internal developer portals with built-in auth, audit workflows, and approval controls.</li>
</ul><div>Agentic AI &amp; MCP Security</div>
<ul><li>Conduct security reviews for agentic AI systems, MCP servers, and n8n automation workflows covering agent permissions, tool usage, OAuth/JWT auth, and SSRF/injection risks.</li>
<li>Publish security guidelines for agentic AI deployments; build automated tooling to assess agent/workflow security at scale.</li>
<li>Present security architecture proposals (e.g., AWS SSO for agentic identity) to Architecture Review Boards.</li>
</ul><div>Security Reviews &amp; Threat Modelling</div>
<ul><li>Conduct infrastructure threat modelling and security assessment reports across product verticals (Remittance, Pay, Food, Groceries, DineOut, AppEngine, etc.).</li>
<li>Drive RFC, PRD, and code security reviews with strong security reasoning and written communication.</li>
<li>Review secrets management approaches, enforce environment separation (dev vs prod controls).</li>
</ul><div>Infrastructure as Code &amp; Automation</div>
<ul><li>Contribute to IaC-based security baselining repositories; build auto-remediation proof-of-concepts that can scale across dozens of AWS accounts</li>
<li>Use agentic AI tooling to automate infrastructure security operations accelerating gap identification and response.</li>
</ul>
<div> 
What You'll Need:</div>
<ul><li>8-10 years of hands-on security engineering experience in a cloud-native environment.</li>
<li>Deep expertise in AWS security (IAM, GuardDuty, EBS encryption, EC2/Beanstalk hardening, Bottlerocket, Secrets Manager).</li>
<li>Strong working knowledge of Kubernetes security (KSPM, container escape risks, runtime detection).</li>
<li>Hands-on experience with Cloudflare (WAF, bot management, SSL/TLS, custom rules, traffic analytics).</li>
<li>Proven track record of owning vulnerability management programs, patching pipelines, SLA tracking, KPI reporting.</li>
<li>Experience with DDoS simulation/resilience testing and cross-functional coordination with SRE and QA.</li>
<li>Familiarity with agentic AI and MCP server security ,SSRF, prompt injection, OAuth/JWT flows, tool permission scoping,</li>
<li>Experience building or reviewing n8n / workflow automation from a security perspective.</li>
<li>Strong communication &amp; presentation skills</li>
<li>Strong cross functional and collaboration skills.</li>
<li>A high-ownership builder mindset, with a proven ability to drive complex initiatives independently from conception to completion</li>
<li>Familiarity with Infrastructure as Code (Terraform/CDK), Endpoint Security (CrowdStrike), HackerOne bug bounty triage, and application security tooling (Snyk/SonarQube) is a strong plus.</li>
</ul>
What We'll Provide You

We offer colleagues the opportunity to drive impact in the region while they learn and grow. As a full time Careem colleague, you will be able to:
<ul>
<li>Work and learn from great minds by joining a community of inspiring colleagues.</li>
<li>Put your passion to work in a purposeful organization dedicated to creating impact in a region with a lot of untapped potential.</li>
<li>Explore new opportunities to learn and grow every day.</li>
<li>Work 4 days a week in office &amp; 1 day from home, and remotely from any country in the world for 30 days a year with unlimited vacation days per year. (If you are in an individual contributor role in tech, you will have 2 office days a week and 3 to work from home.)</li>
<li>Access to healthcare benefits and fitness reimbursements for health activities including gym, health club, and training classes.</li></ul></div>

Senior Security Engineer II

Liquid Technologies

IT &amp; Security Operations AdministratorLocation: On-site Department: IT / Security Reports to: CTO / Head of OperationsAbout the RoleLiquid Technologies is looking for a hands-on IT &amp; Security Operations Administrator to own internal IT, endpoint security, server security, network security, SaaS administration, and employee support for a 65-person team.This person will secure and maintain employee laptops, internal servers, business tools, access controls, EDR, office network, backups, and IT support workflows so employees remain fully operational with minimal downtime.The role works closely with DevOps but does not own production cloud infrastructure, CI/CD pipelines, or client cloud environments.Key ResponsibilitiesIT &amp; Systems Administration● Manage employee laptops, desktops, local servers, network devices, and internal business tools.● Set up, configure, patch, troubleshoot, and maintain Windows, macOS, and Linux devices.● Own laptop maintenance, repairs, replacements, upgrades, spare devices, and readiness so employees can work without avoidable downtime.● Maintain device inventory, server inventory, software licenses, warranties, procurement records, and lifecycle replacements.● Manage IT support tickets, prioritize requests, track SLAs, resolve issues, and document recurring problems.● Create and maintain SOPs for IT support, onboarding, offboarding, access management, backups, and device management.Security Operations● Enforce MFA, SSO, least-privilege access, password manager usage, endpoint security, and secure configuration standards.● Own joiner, mover, and leaver access workflows, including immediate offboarding from critical systems.● Conduct regular access reviews, vulnerability checks, device compliance reviews, and internal risk assessments.● Monitor security alerts, investigate suspicious activity, document incidents, and support post-incident action items.● Support ISO 27001, SOC 2, client security questionnaires, asset registers, evidence collection, and audit readiness.EDR, Endpoint &amp; Server Security● Own EDR deployment, monitoring, and maintenance across company laptops, desktops, and internal servers.● Ensure all managed endpoints and internal servers have active EDR coverage and healthy reporting.● Maintain endpoint security baselines including disk encryption, OS patching, firewall settings, antivirus/EDR, screen lock, and restricted admin access.● Secure internal servers through patching, hardening, logging, backup policies, access controls, and vulnerability remediation.● Maintain server records including owner, purpose, OS, patch status, backup status, access list, and security controls.● Monitor server health, uptime, disk usage, access logs, failed login attempts, and abnormal activity.Network &amp; SaaS Administration● Configure and maintain firewalls, routers, switches, VPN, Wi-Fi, and internal network security.● Implement network segmentation, access controls, and traffic monitoring where needed.● Administer internal tools such as Google Workspace / Microsoft 365, Slack, Jira, GitHub, VPN, password manager, HR systems, and other business applications.● Train employees on security best practices, phishing risks, password hygiene, and secure device usage.Key KPIs● 99% Network Uptime● 100% of active employees have MFA enabled on critical systems.● 100% of company devices are inventoried and assigned to owners.● 100% of employee laptops are maintained, secured, and operational.● Spare / backup laptop availability maintained for urgent employee downtime cases.● 95%+ endpoint patch compliance.● 95%+ internal server patch compliance.● 100% of internal servers are inventoried with owner, purpose, access list, patch status, and backup status.● 100% EDR coverage across managed laptops, desktops, and internal servers.● 100% of leavers are removed from critical systems within 24 hours.● Monthly access review completed for critical tools, servers, and privileged accounts.● EDR alerts reviewed, triaged, and documented within agreed SLA.● Quarterly backup restore test completed and documented for critical internal systems.● Critical incidents documented with root cause and action items.● IT support tickets tracked, prioritized, and resolved within agreed SLA.● Recurring IT issues documented with root cause and preventive action.● Security SOPs created and maintained for onboarding, offboarding, device management, EDR, server hardening, backups, and incident response.Required Qualifications● 3+ years of experience in IT administration, systems administration, network administration, or IT security operations.● Strong working knowledge of Windows, macOS, and Linux.● Experience managing employee devices, local servers, firewalls, VPNs, Wi-Fi, and internal networks.● Experience with Google Workspace or Microsoft 365 administration.● Knowledge of MFA, SSO, IAM, EDR, endpoint security, patching, backups, and access management.● Experience with ticketing, documentation, SOPs, and user support workflows.● Strong troubleshooting skills across hardware, software, operating systems, networks, and connectivity.● Ability to work independently and build structure in a growing company.Preferred Qualifications● Experience with MDM/RMM tools such as Intune, Jamf, Kandji, Google Endpoint Management, NinjaOne, or similar.● Experience with EDR, SIEM, firewalls, VPNs, server hardening, and endpoint protection tools.● Familiarity with ISO 27001, SOC 2, internal audits, or client security reviews.● Certifications such as CompTIA Security+, Network+, CCNA, Fortinet NSE, Microsoft, Google Workspace, Linux, or ISO 27001 Foundation/Internal Auditor.● Scripting ability in PowerShell, Bash, or Python.Scope NoteThis role owns internal IT, employee laptops, endpoint security, internal servers, office network, SaaS administration, access controls, EDR, IT tickets, and internal security operations.Production cloud infrastructure, CI/CD pipelines, application deployments, and client cloud environments are owned by DevOps. This role will collaborate with DevOps on access control, security policies, compliance evidence, and incident response where needed.Pay: From Rs150,000.00 per monthApplication Question(s):<ul><li>How many years of professional experience do you have managing internal IT infrastructure, including employee devices, servers, networks, and IT support?</li><li>Do you have hands-on experience administering Microsoft 365 or Google Workspace, including user access, MFA, SSO, and endpoint security?</li><li>Have you managed endpoint security (EDR), firewalls, VPNs, patch management, and access controls in a corporate IT environment?</li><li>How soon you can join if get selected? (in days)</li><li>Are you comfortable to manage commute to Zamzama Phase V, Karachi?</li><li>Are you comfortable to work in evening shift? ( 3 PM- 12 AM)</li><li>Current salary (in PKR)</li><li>Expected Salary (in PKR)</li><li>Are you currently employed?</li></ul>Work Location: In person

IT & Security Operations Administrator

Level 3 BOS

<div>
 
 Description
 
 
 
 We&rsquo;re looking for an
 
 experienced and detail-oriented professional
 
 to join our team as a
 
 Manager &ndash; Surveillance
 
 . In this role, you&rsquo;ll lead daily surveillance operations, guide a skilled team, and use your expertise to maintain a secure environment across our organization.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Manage day-to-day surveillance and monitoring activities, ensuring effective security protocols.
 </li>
 <li>
 Evaluate and improve existing security procedures and systems.
 </li>
 <li>
 Supervise, train, and mentor surveillance staff to enhance skills and performance.
 </li>
 <li>
 Design and implement strategies to strengthen security and meet compliance standards.
 </li>
 <li>
 Collect and analyze data from monitoring systems; prepare detailed reports for management.
 </li>
 <li>
 Partner with other departments to address security issues and improve overall safety.
 </li>
 <li>
 Keep current with new technologies, industry trends, and best practices in security.
 </li>
 <li>
 Respond quickly to incidents and emergencies, coordinating with law enforcement when required.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or equivalent education.
 </li>
 <li>
 5&ndash;10 years of experience in surveillance or security operations.
 </li>
 <li>
 Advanced Excel skills with the ability to work with complex data sets.
 </li>
 <li>
 Proven experience leading and managing teams.
 </li>
 <li>
 Strong communication skills, written and verbal.
 </li>
 <li>
 Calm, decisive approach under pressure.
 </li>
 <li>
 Professional certifications in surveillance or security (preferred).
 </li>
 <li>
 Familiarity with modern surveillance systems and security software (preferred).
 
 
 </li>
 </ul>
 
 Job Type:
 
 Full-time
 
 
 
 Location:
 
 Karachi
 
 
 
 Work Type:
 
 On Site
 
 
 
 Shift: 7pm-4am
 
</div>

Surveillance and Monitoring Manager

Job description:Location: Naya NazimabadJob Summary:The IT Support Officer will be responsible for providing technical assistance and support to staff and clients within the organization. This role includes diagnosing hardware and software problems, managing and troubleshooting IT systems, maintaining network infrastructure, and ensuring smooth IT operations. The IT Support Officer will also be responsible for escalating more complex issues to higher-level technical support when necessary.Key Responsibilities:<ul><li>Provide first-line support to resolve hardware, software, and network-related issues.</li><li>Respond to and resolve IT support tickets in a timely manner.</li><li>Assist employees with setting up and troubleshooting computers, printers, and other peripherals.</li><li>Perform routine maintenance of IT equipment, ensuring optimal performance.</li><li>Install, configure, and update operating systems, applications, and security patches.</li><li>Monitor system performance and identify potential issues before they escalate.</li><li>Troubleshoot and resolve basic network connectivity issues.</li><li>Assist with the configuration and maintenance of routers, switches, and firewalls.</li><li>Maintain network documentation and ensure data backups are performed regularly.</li><li>Ensure compliance with organizational IT policies and procedures.</li><li>Implement security measures to protect data and systems from cyber threats.</li><li>Monitor IT systems for potential vulnerabilities or breaches.</li></ul>Job Type: Full-timeWork Location: In person

IT Support Officer

Mashreq

<div>
 To lead and manage the delivery, support, and continuous enhancement of the Bank's Self-Service Channels, including ATMs, Cash Deposit Machines (CDMs), Kiosks, and Payment Systems.
 
 The role is responsible for ensuring the availability, security, performance, and regulatory compliance of these platforms while driving technology transformation, system optimization, and customer experience improvements.
 
 The position also oversees the successful implementation of projects, application enhancements, and operational initiatives to support business growth, reduce operational risk, and maintain uninterrupted banking services.
</div>

Assistant Vice President - Technology.MGN Pak - AMS - Retail.MIT - PAKCOE

Explore 29+ Analyst information security in Karachi this August. Find roles across top companies and apply now to boost your career.