senior business analyst

ar application specialist

business analyst

data engineer

it support engineer

cybersecurity analyst

UDHC Lahore

Job Title: IT Security AnalystLocation: [Lahore] On SiteDepartment: Infrastructure / OperationsReports To: Infrastructure Manager / IT OperationsWe are hiring an IT Security Analyst to help protect our healthcare technology platforms and infrastructure. The ideal candidate should have experience in cybersecurity, vulnerability management, incident response, and security monitoring. Knowledge of healthcare compliance and cloud security is preferred. Bachelor&rsquo;s degree in computer science, Cybersecurity, IT, or related field in a must. A certification like CompTIA Security+, CEH, CISSP, CISM is highly desirable. We expect the IT Security Analyst to lead the activities in acquiring and maintaining various licenses and certifications like HIPAA and SOC 2. Ideal candidate must have 2+ years of experience in cybersecurity or IT security.Key Responsibilities:Security and Vulnerability Monitoring<ul><li>Monitor security alerts, logs, and suspicious activities using SIEM tools.</li><li>Investigate security incidents, threats, and breaches.</li><li>Perform incident response activities including containment, eradication, and recovery.</li><li>Document incidents and prepare incident reports and track fixes.</li><li>Conduct vulnerability assessments and security scans.</li><li>Identify security weaknesses in systems, servers, networks, and applications.</li><li>Coordinate remediation efforts with IT teams.</li></ul>Security Operations:<ul><li>Manage endpoint protection, antivirus, firewall, and access controls.</li><li>Monitor user access and privilege management.</li><li>Ensure secure configuration of systems and devices.</li><li>Review, maintain and suggest updates in security policies and procedures.</li><li>Participate and lead in security audits and assessments.</li></ul>Threat Detection, Prevention and Awareness:<ul><li>Analyze emerging cyber threats and attack patterns.</li><li>Implement preventive security measures.</li><li>Assist in phishing analysis and malware investigations.</li><li>Conduct threat intelligence reviews.</li><li>Support employee security awareness training.</li><li>Assist in phishing simulations and awareness campaigns.</li></ul>Technical Skills Required:<ul><li>SIEM tools (Splunk, QRadar, Sentinel)</li><li>Endpoint security solutions</li><li>Firewalls and IDS/IPS systems</li><li>Vulnerability scanning tools (Nessus, Qualys)</li></ul>Send your CVs at resume@udhc.netWork Location: In person

IT Security Analyst

Nakisa

<div>
 
 Description:
 
 
 
 Nakisa is seeking a detail-oriented, proactive, and technically curious
 
 Security and Compliance Analyst
 
 to support our growing global security and compliance initiatives. This role is central to maintaining and enhancing Nakisa&rsquo;s compliance posture with recognized standards such as
 
 SOC 1, SOC 2, ISO/IEC 27001
 
 , and data privacy regulations.
 
 
 You&rsquo;ll work closely with internal teams and external auditors to manage evidence collection, track audit deliverables, and maintain robust documentation. You&rsquo;ll also assist with RFPs/RFIs from prospective clients and contribute to internal security improvement projects. A strong interest and understanding of
 
 Artificial Intelligence (AI)
 
 , particularly its implications on compliance and security, is essential.
 
 
 This is an excellent opportunity for someone looking to launch or grow a career in information security and compliance in a
 
 fast-paced SaaS environment
 
 that is deeply invested in
 
 cloud technology, AI
 
 , and
 
 process excellence
 
 .
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Coordinate and manage tasks related to Nakisa&rsquo;s security and compliance programs, including SOC 1, SOC 2, and ISO 27001 audits.
 </li>
 <li>
 Collaborate with internal stakeholders and external auditors to collect, organize, and validate audit evidence and documentation.
 </li>
 <li>
 Drive and support continuous improvement of internal processes, controls, and compliance documentation.
 </li>
 <li>
 Assist in completing security and compliance sections of RFPs, RFIs, and due diligence questionnaires from prospects and clients.
 </li>
 <li>
 Contribute to internal information security projects and process improvements.
 </li>
 <li>
 Ensure documentation and policies are accurate, up-to-date, and aligned with industry standards.
 </li>
 <li>
 Monitor and follow up on compliance deadlines, audit deliverables, and remediation actions.
 </li>
 <li>
 Stay informed on evolving security frameworks, regulatory requirements, and AI-related security practices.
 </li>
 <li>
 Educate employees on security awareness topics and best practices through training, content creation, or internal communications.
 
 
 </li>
 </ul>
 
 Qualifications:
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in information security, Cybersecurity, Information Systems, Computer Science, or a related field&mdash;or equivalent hands-on experience.
 </li>
 <li>
 Solid knowledge of industry standards and frameworks, such as:
 </li>
 <li>
 SOC 1 / SOC 2 (Type I &amp; II), ISO/IEC 27001 &amp; 27017, CIS Controls, Data protection regulations (GDPR, PIPEDA, CCPA, etc.)
 </li>
 <li>
 Strong reporting and documentation skills:
 </li>
 <li>
 Proficiency in generating audit reports, compliance documentation, and RFP/RFI responses
 </li>
 <li>
 Skilled in Excel, Word, PowerPoint, and PDF tools for structured reporting and evidence tracking
 </li>
 <li>
 Experience with compliance audits, security questionnaires, or risk assessments
 </li>
 <li>
 Basic technical knowledge of cloud environments (AWS, Azure, GCP), access controls, encryption, and security operations
 </li>
 <li>
 Exceptional attention to detail, with the ability to identify gaps, maintain precision, and meet deadlines
 </li>
 <li>
 Strong verbal and written communication skills, comfortable working cross-functionally with internal teams, auditors, and clients
 </li>
 <li>
 Demonstrated interest and foundational knowledge in Artificial Intelligence, especially its impact on cybersecurity and compliance
 
 
 </li>
 </ul>
 
 Preferred:
 
 
 
 <ul>
 <li>
 3+ years of relevant work experience in security compliance, audit, or GRC functions
 </li>
 <li>
 Exposure to internal controls testing, risk registers, or information security policies
 </li>
 <li>
 Certifications (or active pursuit) such as:
 </li>
 <li>
 Certified in Cybersecurity (ISC&sup2; CC), ISO 27001 Lead Implementer or Foundations, CISA etc.
 
 
 </li>
 </ul>
 
 Why Nakisa?
 
 
 
 💻
 
 Flexibility
 
 : Hybrid work model with one day a week from home or four days a month from home.
 
 
 🌴
 
 Time off
 
 : Three weeks of vacation to start, generous sick leave, one personal day, and maternity or paternity leave.
 
 
 🩺
 
 Health and wellness
 
 : Comprehensive IPD and OPD coverage plus life insurance.
 
 
 💰
 
 Financial security
 
 : Three bonuses a year, including annual and festive bonuses.
 
 
 🎉
 
 Social perks
 
 : Team events, outdoor lunches or dinners, birthday celebrations, annual gatherings, giveaways, and more.
 
 
 🚀
 
 Career growth
 
 : Mentorship, education assistance up to PKR 100,000 per year, and reimbursement of job-related professional dues.
 
 
 🤝
 
 Culture
 
 : Supportive, values-driven teams with leaders who care.
 
 
 🚀
 
 Make your impact at Nakisa.
 
 
 
 If building enterprise-grade, privacy-first AI excites you, apply today and help shape the future of enterprise software.
 
 
 <ul>
 <li>
 Location: Mega Tower Gulberg, Lahore
 </li>
 <li>
 Hiring process: AI-powered screening, Recruiter conversation, hiring manager interview, and a panel or skills assessment depending on the role
 </li>
 <li>
 Not a perfect match: Apply anyway. Potential and drive matter here
 
 
 </li>
 </ul>
 
 Apply today.
 
</div>

Security and Compliance Analyst

Techbridge Consultancy Services

Job Location: Gulberg, Lahore (On-Site) Experience Required: 2&ndash;3 Years Salary: Up to 110,000 PKRResponsibilities:Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:<ul><li>SOC monitoring coverage for any of the following shifts: EST Time 8:00am &ndash; 4:00pm (PST 5:00pm &ndash; 1:00am), 4:00pm &ndash; 12:00am (PST 1:00am &ndash; 9:00am), 12:00am &ndash; 8:00am (PST 9:00am &ndash; 5:00pm); the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats</li><li>In-depth analysis of security events, alerts and incidents</li><li>Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats</li><li>Analyzing logs, network traffic and data to identify potential threats and vulnerabilities</li><li>Development security dashboards and reporting; compile threat intelligence reports and manage log data</li><li>Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)</li><li>Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)</li><li>Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)</li><li>Firewall rules configuration and optimization</li><li>SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)</li><li>Technical writing and security policy development</li><li>Staying current on industry trends, keeping up-to-date with relevant CVE&rsquo;s and the evolving threat landscape</li><li>Conducting vulnerability scans of network and applications</li><li>Keeping company systems up-to-date with current security patches</li><li>Recommending security improvements to line managers or senior management</li></ul>Requirements:<ul><li>Strong understanding of cybersecurity principles and the SOC environment</li><li>Bachelor&rsquo;s degree in cyber security, computer sciences or equivalent</li><li>Good understanding of vulnerability management tools and techniques</li><li>Good understanding of Windows, Linux and macOS operating systems and endpoints</li><li>Knowledge of modern problem-solving skills, and keen attention to detail</li><li>Good understanding of the modern security in SDLC practices</li><li>Capable of Balancing multiple priorities and remaining flexible in a changing environment</li><li>Good communication and interpersonal skills</li><li>Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)</li></ul>Other duties may include:&middot; Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)&middot; Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services&middot; Personnel are required to work on-site; remote or hybrid work options will not be available&middot; Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services&middot; Personnel must not work more than 12 consecutive hours per shift&middot; Personnel are required to adhere to internal cybersecurity and IT policies and standards&middot; Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer dataJob Type: Full-timeApplication Question(s):<ul><li>Are you comfortable working onsite in any of the following SOC shift timings?</li><li>Are you comfortable with an on-site role, as this position is not remote or hybrid?</li><li>Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?</li><li>Are you fluent in English, both written and spoken?</li><li>Are you from Lahore? (Yes/No)</li></ul>Work Location: In person

SOC Analyst

NKU Technologies Pvt.Ltd.

We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.Key Responsibilities:<ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>7&ndash;10 years of hands-on experience in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul>Preferred Certifications:<ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul>Key Skills:<ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul>Nice to Have:<ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul>Working Model:<ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li></ul>May require flexibility for testing windows and incident response supportPay: From Rs300,000.00 per monthWork Location: In person

lead Cyber Security officer

The Children's Place

&lt;p style=&quot;text-align:left&quot;&gt;&lt;b&gt;Location: &lt;/b&gt;&lt;/p&gt;Lahore,&lt;h2&gt;&lt;/h2&gt;&lt;h2&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span class=&quot;emphasis&quot;&gt;&lt;b&gt;Job Summary:&lt;/b&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/h2&gt;The Information Security Analyst will be responsible for providing key development, design, integration, and enhancement of information security governance and frameworks necessary to manage the risks and cyber security for the company. This position will ensure security controls are defined, optimized, and remain consistent throughout the organization and meet regulatory requirements and industry best practices such as PCI and IT SOX.&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;h2&gt;&lt;br&gt;&lt;span&gt;&lt;span&gt;&lt;span&gt;&lt;span class=&quot;emphasis&quot;&gt;&lt;b&gt;Responsibilities:&lt;/b&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/h2&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;p&gt;&lt;b&gt;&lt;u&gt;&lt;b&gt;Key Accountabilities:&lt;/b&gt;&lt;/u&gt;&lt;/b&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;Develop and implement information security frameworks and controls such as ISO27001:2013, SAN Top 20, and OWASP Top 10&lt;/li&gt;&lt;li&gt;Manage a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from internal customers, consultants, and service providers&lt;/li&gt;&lt;li&gt;Heavy responsibility on PCI and IT SOX compliance efforts&lt;/li&gt;&lt;li&gt;Establish baseline hardening standards for IT systems across organization&lt;/li&gt;&lt;li&gt;Ensure all systems are monitored by QRadar to aggregate logs, correlate events, and detect incidents&lt;/li&gt;&lt;li&gt;Enhance and expand patch management program, review the patches, evaluate the risk, and apply the patches using a risk based approach&lt;/li&gt;&lt;li&gt;Periodically update policies and procedures to ensure they accurately reflect business requirements an align to industry leading security practices&lt;/li&gt;&lt;li&gt;Participate in the development of Cyber Security awareness content&lt;/li&gt;&lt;li&gt;Conduct periodic vulnerability scanning process and penetration tests&lt;/li&gt;&lt;li&gt;Maintain a flexible work schedule to meet position demands for after-hours support&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;&lt;u&gt;&lt;b&gt;Education and Experience:&lt;/b&gt;&lt;/u&gt;&lt;/b&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;Bachelor&rsquo;s degree in computer science or related field&lt;/li&gt;&lt;li&gt;3+ years of experience in information security&lt;/li&gt;&lt;li&gt;CISSP, CISA, or CISM preferred&lt;/li&gt;&lt;li&gt;Experience with developing security framework such as ISO, PCI, and IT SOX audit requirements and security attack vectors&lt;/li&gt;&lt;li&gt;Experience with data classification, access control, and security models&lt;/li&gt;&lt;li&gt;Experience with implementing and managing DLP, FIM, Application Whitelisting, and ERM tools&lt;/li&gt;&lt;li&gt;Experience with various authentication protocols and encryption algorithms&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;&lt;u&gt;&lt;b&gt;Skills and Behaviors:&lt;/b&gt;&lt;/u&gt;&lt;/b&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;Strong analytical and problem solving skills&lt;/li&gt;&lt;li&gt;Ability to work effectively will people at various levels throughout the organization&lt;/li&gt;&lt;li&gt;Must be able to work well under pressure, grasp new ideas quickly, think outside the box, and be able to follow up in a dynamic environment&lt;/li&gt;&lt;li&gt;Strong multi-tasking skills in a fast paced environment&lt;/li&gt;&lt;li&gt;Thorough understanding of the TCP/IP suite&lt;/li&gt;&lt;li&gt;Strong team player&lt;/li&gt;&lt;li&gt;Work well independently with minimum supervision&lt;/li&gt;&lt;li&gt;Excellent verbal and written communication and interpersonal skills&lt;/li&gt;&lt;/ul&gt;

Information Security Analyst

Ashlar Global

Job Overview; We are seeking a skilled DevOps Engineer with 3&ndash;4 years of hands-on experience to support our development and infrastructure operations on a part-time contractual basis. The ideal candidate should have strong experience in CI/CD pipelines, cloud infrastructure, automation, and a solid understanding of cybersecurity best practices to ensure secure and reliable deployment environments.Key Responsibilities;<ul><li>Design, implement, and maintain CI/CD pipelines for automated build, testing, and deployment processes.</li><li>Manage and monitor cloud infrastructure (Azure).</li><li>Implement Infrastructure as Code (IaC) using tools such as Terraform, ARM templates, or similar.</li><li>Ensure system security, compliance, and vulnerability management across infrastructure and applications.</li><li>Implement and maintain containerization and orchestration solutions (Docker, Kubernetes).</li><li>Monitor system performance and ensure high availability and scalability of applications.</li><li>Apply cybersecurity best practices, including secure configurations, access control, and data protection.</li><li>Conduct security audits, patch management, and vulnerability assessments.</li><li>Collaborate with development teams to streamline deployment and operational processes.</li><li>Troubleshoot infrastructure and deployment issues.</li></ul>Required Skills &amp; Qualifications;<ul><li>3&ndash;4 years of experience in DevOps or Cloud Engineering.</li><li>Strong experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps).</li><li>Experience with cloud platforms Azure.</li><li>Knowledge of container technologies such as Docker and Kubernetes.</li><li>Experience with scripting and automation (Bash, Python, PowerShell).</li><li>Understanding of network security, firewalls, SSL, IAM policies, and secure architecture.</li><li>Familiarity with monitoring tools (Prometheus, Grafana, ELK Stack, or similar).</li><li>Knowledge of cybersecurity frameworks, vulnerability management, and incident response.</li><li>Strong problem-solving and communication skills.</li></ul>Job Type: Contract Contract length: 12 monthsWork Location: Remote

Azure DevOps Engineer / Cyber Security

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Explore 49+ Cybersecurity analyst in Lahore this May. Find roles across top companies and apply now to boost your career.