offensive security engineer

NKU Technologies Pvt.Ltd.

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

VentureDive

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

Penetration Tester

Keyway Solutions

Job description: We&rsquo;re Hiring &mdash; Design Engineer (Tekla Structures) KEYWAY Solutions is looking for a talented Design Engineer with expertise in Tekla Structures to join our growing team. If you have hands-on experience in 3D modeling, detailing, and creating fabrication drawings, we want to hear from you!How to Apply: Please follow the link below and apply directly through our application portal.https://keywaygs.zohorecruit.com/jobs/Careers/811363000000962028/Tekla-Structure-Detailer-and-Modeler?source=CareerSiteImportant: To complete your application, make sure you: <ul><li>Fill out the pre-assessment questionnaire</li><li>Upload your portfolio</li><li>Share your video introduction and Submit a recorded video explaining your Tekla Structures project (Google Drive link enabled for access)</li><li>Kindly ensure you complete all steps of the application process for your application to be considered. We look forward to reviewing your application!</li></ul>Hiring Process and Contractual Requirement: <ul><li>Two rounds of online interviews, followed by an onsite 5 day paid trial period</li><li>A 2-year contractual commitment is mandatory (On legal Stamp Paper)</li><li>​A bachelor&rsquo;s degree will be required as a security deposit upon joining (held until contract obligations are met).</li></ul>Benefits<ul><li>Paid leaves (annual, sick, and casual)</li><li>Annual increment of 10%</li><li>Note: No additional benefits are currently provided</li></ul>Address: 107/A A-5, 1 PIA Main Boulevard, Phase PGECHS, Lahore, 54000, Lahore, 54770Website Link: https://keywaygs.com/Job Type: Full-timePay: Rs80,000.00 - Rs125,000.00 per monthApplication Question(s):<ul><li>Apply through the link </li></ul>https://keywaygs.zohorecruit.com/jobs/Careers/811363000000962028/Design-Engineer-Tekla-Structures?source=CareerSite Work Location: In person

Tekla Structures Detailer and Modeler

Taraki

<div>
 Our client
 
 BinaryBrix
 
 is looking for
 
 Automation
 
 
 Engineer
 
 in
 
 Lahore
 
 .
 
 
 
 Job Description:
 
 
 
 Job Title: Automation Engineer
 
 
 
 Location:
 
 Onsite - Thokar Niaz Baig, Lahore
 
 
 
 Employment Type:
 
 Full-Time
 
 
 
 Job Summary:
 
 
 
 We are seeking a detail-oriented and proactive Automation Engineer to design, implement, and maintain automated workflows that connect multiple applications and streamline business processes. The ideal candidate will have hands-on experience with Zapier, strong problem-solving skills, and a basic understanding of APIs and SaaS platforms.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Design, build, and optimize automated workflows (Zaps) using Zapier
 </li>
 <li>
 Integrate third-party applications such as CRMs, project management tools, marketing platforms, and databases
 </li>
 <li>
 Troubleshoot and resolve integration issues and automation errors
 </li>
 <li>
 Customize triggers, actions, filters, and webhooks based on business requirements
 </li>
 <li>
 Collaborate with development, product, and operations teams to understand automation needs
 </li>
 <li>
 Maintain documentation of workflows, integrations, and automation logic
 </li>
 <li>
 Ensure data accuracy, security, and performance across integrations
 
 
 
 </li>
 </ul>
 
 Required Skills &amp; Qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Technology, Software Engineering, or a related technical field.
 </li>
 <li>
 Minimum 1+ year of hands-on experience working with Zapier integrations
 </li>
 <li>
 Strong understanding of triggers, actions, filters, paths, and webhooks in Zapier
 </li>
 <li>
 Basic knowledge of APIs, REST concepts, and JSON
 </li>
 <li>
 Familiarity with SaaS tools such as CRM systems, email marketing platforms, task management tools, and cloud applications
 </li>
 <li>
 Ability to analyze processes and suggest automation improvements
 </li>
 <li>
 Strong problem-solving and communication skills
 </li>
 <li>
 Candidates with relevant certifications or practical automation experience may also be considered.
 
 
 
 </li>
 </ul>
 
 Preferred (Nice to Have):
 
 
 
 <ul>
 <li>
 Experience with Make (Integromat) or other automation tools
 </li>
 <li>
 Understanding of no-code/low-code platforms
 </li>
 <li>
 Prior experience in a SaaS or tech-based company
 
 </li>
 </ul>
</div>

Automation Engineer - BinaryBrix

Mexa Global (PVT) LTD

Job Description:MGC Freight is seeking a highly skilled DevOps / IT Infrastructure &amp; Security Engineer with hands-on experience in cloud infrastructure, endpoint security, server management, and data protection. This job role is based in Bahria Town Lahore and the ideal candidate will be responsible for maintaining secure, scalable systems and ensuring compliance with international data security standards.Responsibilities:<ul><li>Design, implement, and manage secure cloud infrastructure on Amazon Web Services</li><li>Manage server-side infrastructure (Linux/Windows servers, networking, storage)</li><li>Implement and maintain endpoint security solutions (EDR/XDR, antivirus, device control)</li><li>Configure Identity &amp; Access Management (IAM), role-based access, and security policies</li><li>Build and maintain CI/CD pipelines for secure deployments</li><li>Monitor systems using logging, alerting, and SIEM tools</li><li>Conduct security testing, vulnerability assessments, and penetration testing</li><li>Ensure data security, encryption, backup, and disaster recovery strategies</li><li>Implement compliance frameworks including GDPR and data protection standards</li><li>Harden infrastructure against threats and manage firewalls, VPNs, and network security</li><li>Collaborate with development teams to enforce DevSecOps best practices</li></ul>Requirements:<ul><li>4 years of experience in DevOps / IT Security / Infrastructure roles</li><li>Strong expertise in AWS (EC2, S3, RDS, VPC, IAM, CloudWatch, Lambda)</li><li>Experience with server management (Linux/Unix, Windows Server)</li><li>Hands-on experience with containerization (Docker, Kubernetes)</li><li>Knowledge of endpoint security tools and device management</li><li>Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI)</li><li>Strong understanding of network security, firewalls, VPNs</li><li>Familiarity with security testing tools (Nmap, Burp Suite, OWASP practices)</li><li>Understanding of data protection, encryption, and compliance (GDPR)</li><li>Experience with log monitoring and SIEM tools</li></ul>Why Join MGC Freight Company:<ul><li>Competitive salary and benefits</li><li>Opportunity to work on real-world logistics platforms</li><li>Career growth and learning opportunities</li><li>Collaborative and innovative work environment</li></ul>Location: Bahria Town LahoreHow to Apply:Email your resume with mentioning the job title at hr@mgcfreight.com OR drop on Whatsapp: 0304-4827485Pay: From Rs130,000.00 per monthApplication Question(s):<ul><li>hich of the following AWS services have you worked with professionally? </li></ul>EC2 S3 RDS VPC IAM CloudWatch Lambda<ul><li>Do you have hands-on experience with containerization and CI/CD tools?</li><li>Are you comfortable working onsite in Bahria Town, Lahore?</li></ul>Experience:<ul><li>DevOps, IT Infrastructure, or Cyber Security roles?: 4 years (Required)</li></ul>Work Location: In person

IT Infrastructure Engineer

aQovia

<div>Why Aqovia?
At the Intersection of Innovation and Impact, introducing Aqovia. Aqovia is a UK-based technology firm dedicated to creating tangible value through the power of AI, data-driven, and bespoke software solutions and services.
Our unique approach extends beyond traditional service and solutions delivery, we strategically invest in and nurture a diverse portfolio of promising companies operating across vital sectors including; financial services, health, infrastructure management, sustainability, education, and business intelligence.
This commitment to creating innovation across a broad spectrum allows Aqovia to stay at the cutting edge, delivering transformative solutions and creating significant impact. For our clients and strategic partners, Aqovia offers a unique opportunity to be part of a dynamic and forward-thinking group shaping the future
Role Overview:
We are seeking a Senior Systems &amp; DevOps Engineer to lead the technical direction and maintenance of our hybrid infrastructure. This role is designed for an engineer with deep expertise in Linux systems administration and local virtualization who thrives in bare-metal environments. You will be responsible for balancing self-hosted infrastructure with strategic cloud deployments to ensure a high-performance, cost-effective platform.
The role involves managing the full operational lifecycle of both physical and virtual assets, focusing on the remote hardware through IPMI/OOB and automated PXE boot workflows. You will oversee advanced container orchestration, network configuration, and storage management, ensuring that all systems are resilient and secure. This includes a heavy emphasis on automating routine tasks and optimizing system-level configurations to support a stable production environment.
As a senior member of the team, you will act as a technical authority for our infrastructure, championing &quot;Infrastructure as Code&quot; (IaC) and modern observability standards. You will be responsible for integrating security best practices throughout the stack&mdash;from automated patch management to encrypted storage&mdash;utilizing open-source tools to maintain visibility and reliability across our diverse portfolio of digital solutions.
Key Responsibilities::
Core Linux Administration &amp; Engineering<ul><li>
Deep Linux Expertise: Advanced mastery of the Linux ecosystem (Debian/Ubuntu, RHEL/Alma, or Arch), systemd, and boot processes (GRUB/EFI).</li><li>
Networking Stack: In-depth knowledge of networking fundamentals (L2/L3, VLAN tagging, bonding/bridging) and software-defined networking within a Linux environment (IPTables/NFTables, WireGuard).</li><li>
Shell &amp; Scripting: Proficiency in Bash and Python for automating system tasks, parsing logs, and interacting with local APIs.</li><li>
Storage Management: Hands-on experience with advanced filesystems and storage protocols, specifically ZFS, BTRFS, LVM, and NFS/iSCSI.</li></ul>
Virtualization &amp; Bare Metal Management<ul><li>
Hypervisor Mastery: Experience deploying and managing Type-1 hypervisors like Proxmox (KVM/QEMU), ESXi, or XCP-ng.</li><li>
Hardware Provisioning: Ability to manage physical server lifecycles, including IPMI/iDRAC/ILO out-of-band management and PXE boot automation (Netboot.xyz, MaaS).</li><li>
Hardware Knowledge: Familiarity with rack-mounting, power redundancy (UPS/PDU), and diagnosing hardware failures (failed DIMMs, RAID controllers).</li></ul>
Containerization &amp; Orchestration<ul><li>
Container Runtimes: Expert-level management of Docker and Podman, focusing on security hardening, rootless execution, and custom image builds.</li><li>
Lightweight Orchestration: Experience with Kubernetes (k8s) or k3s, specifically focusing on self-hosted ingress controllers (Traefik, Nginx), Persistent Volume Claims (PVCs), and MetalLB.</li></ul>
Infrastructure as Code (IaC) &amp; Automation<ul><li>
Configuration Management: Extensive use of Ansible to manage &quot;snowflake&quot; servers and ensure idempotent state across hundreds of nodes.</li><li>
Provisioning Tools: Experience using Terraform or OpenTofu to manage non-cloud providers (Proxmox provider, VMware provider, or Libvirt).</li><li>
CI/CD Pipelines: Building and maintaining pipelines using open-source tools like Gitea/Forgejo, Woodpecker CI, or GitLab Runner.</li><li>
Observability: Setting up and tuning the &quot;LGTM&quot; stack (Loki, Grafana, Tempo, Mimir) or Prometheus/Grafana for real-time hardware and service monitoring.</li><li>
Security First: Implementation of local security best practices, including Fail2Ban, CrowdBsec, and Certificate Management (Let&rsquo;s Encrypt/ACME via DNS challenges).</li></ul>
Skills &amp; Experience:
Essential<ul><li>
Proven experience as a Systems or DevOps Engineer with a focus on self-hosted infrastructure.</li><li>
Deep expertise in Linux internals, kernel tuning, and system optimization.</li><li>
Strong experience in local virtualization and managing Type-1 hypervisors.</li><li>
Practical understanding of Infrastructure as Code (IaC) principles and automated provisioning.</li><li>
Hands-on experience building and maintaining open-source CI/CD pipelines.</li><li>
Excellent communication skills to articulate technical trade-offs regarding hardware and software choices.</li></ul>
Desirable<ul><li>
Experience in consultancy or professional services environments.</li><li>
Familiarity with microservices, containerization, and modern deployment patterns.</li><li>
Experience working across multi-disciplinary teams (Engineering, QA, Product).</li><li>
Relevant certifications in Linux Administration, Kubernetes (CKA/CKAD), or Security.</li></ul>
Why Join Aqovia?<ul><li>
Impactful Work: Directly support the Group CEO in driving strategic initiatives across fintech, digital banking, and emerging markets.</li><li>
Dynamic Environment: Work across multiple countries and cultures, interacting with senior executives, government officials, and partners.</li><li>
Career Growth: Exposure to executive leadership, strategy, and cross-regional operations, offering opportunities for accelerated development. 
Collaborative Culture: Join a global, forward-thinking team committed to innovation,impact, and operational excellence.</li></ul>
Diversity &amp; Inclusion:
Aqovia is committed to building a diverse and inclusive workplace that reflects the communities we serve. We welcome applicants from all backgrounds and believe in fostering an environment where everyone is valued and empowered.</div>

Senior Systems & DevOps Engineer

Ashlar Global

Job Overview; We are seeking a skilled DevOps Engineer with 3&ndash;4 years of hands-on experience to support our development and infrastructure operations on a part-time contractual basis. The ideal candidate should have strong experience in CI/CD pipelines, cloud infrastructure, automation, and a solid understanding of cybersecurity best practices to ensure secure and reliable deployment environments.Key Responsibilities;<ul><li>Design, implement, and maintain CI/CD pipelines for automated build, testing, and deployment processes.</li><li>Manage and monitor cloud infrastructure (Azure).</li><li>Implement Infrastructure as Code (IaC) using tools such as Terraform, ARM templates, or similar.</li><li>Ensure system security, compliance, and vulnerability management across infrastructure and applications.</li><li>Implement and maintain containerization and orchestration solutions (Docker, Kubernetes).</li><li>Monitor system performance and ensure high availability and scalability of applications.</li><li>Apply cybersecurity best practices, including secure configurations, access control, and data protection.</li><li>Conduct security audits, patch management, and vulnerability assessments.</li><li>Collaborate with development teams to streamline deployment and operational processes.</li><li>Troubleshoot infrastructure and deployment issues.</li></ul>Required Skills &amp; Qualifications;<ul><li>3&ndash;4 years of experience in DevOps or Cloud Engineering.</li><li>Strong experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps).</li><li>Experience with cloud platforms Azure.</li><li>Knowledge of container technologies such as Docker and Kubernetes.</li><li>Experience with scripting and automation (Bash, Python, PowerShell).</li><li>Understanding of network security, firewalls, SSL, IAM policies, and secure architecture.</li><li>Familiarity with monitoring tools (Prometheus, Grafana, ELK Stack, or similar).</li><li>Knowledge of cybersecurity frameworks, vulnerability management, and incident response.</li><li>Strong problem-solving and communication skills.</li></ul>Job Type: Contract Contract length: 12 monthsWork Location: Remote

Azure DevOps Engineer / Cyber Security

Explore 207+ Offensive security engineer in Lahore this May. Find roles across top companies and apply now to boost your career.