human security testing & social engineering specialist Jobs in Islamabad

human security testing & social engineering specialist

lab engineer - cyber security - pnec Jobs in Islamabad

lab engineer - cyber security - pnec

malware research & defensive analyst (reverse engineering) Jobs in Islamabad

malware research & defensive analyst (reverse engineering)

network security engineer (onsite) Jobs in Islamabad

network security engineer (onsite)

penetration tester (offensive security) Jobs in Islamabad

penetration tester (offensive security)

penetration tester offensive security

United Sol (Pvt.) Ltd

Conduct authorized security assessments against web, cloud, and infrastructure targets to identify vulnerabilities, verify exploitability, and deliver actionable remediation guidance.Responsibilities<ul><li>Plan and execute agreed penetration tests (web apps, APIs, cloud, networks) under rules of engagement.</li><li>Produce clear technical reports with risk rating, reproduction steps, and remediation recommendations.</li><li>Work with engineering teams to validate fixes and re-test.</li><li>Keep tools, techniques, and test methodology up to date; contribute to internal playbooks.</li></ul>Required<ul><li>3+ years in offensive security/penetration testing or red-team engagements.</li><li>Strong web app, network, and host testing experience; familiarity with common tools and manual testing techniques.</li><li>Experience producing clear technical and executive reports.</li><li>Bachelor&rsquo;s in CS/IT or equivalent experience.</li></ul>Desired<ul><li>OSCP, OSWE, CREST, eJPT or similar certification.</li><li>Experience with cloud (AWS/Azure/GCP) security testing.</li></ul>ComplianceAll work is strictly authorized and performed under approved scopes and legal agreements.Job Type: Full-timeWork Location: In person

Penetration Tester (Offensive Security)

MTBC CareCloud

Job SummaryThe VAPT Analyst will be responsible for conducting security testing of applications, systems, and networks to identify vulnerabilities, assess risks, and recommend remediation measures. This role requires strong technical expertise in penetration testing, vulnerability assessment tools, and knowledge of security frameworks and methodologies.Key Responsibilities<ul><li>Conduct Vulnerability Assessment and Penetration Testing (VAPT) on websites, APIs, and mobile applications (Android/iOS).</li><li>Identify, analyze, and document security vulnerabilities, threats, and risks.</li><li>Prepare detailed technical and executive-level reports with findings, risk ratings, and remediation recommendations.</li><li>Collaborate with IT, DevOps, and development teams to remediate vulnerabilities.</li><li>Maintain knowledge of OWASP Top 10, NIST, ISO 27001, and other cybersecurity frameworks.</li><li>Stay updated with the latest security tools, vulnerabilities, and penetration testing techniques.</li><li>Assist in compliance audits and security policy implementation when required.</li></ul>Requirements<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cyber Security, or related discipline.</li><li>1&ndash;2 years of experience in vulnerability assessment, penetration testing, or related roles.</li><li>Hands-on experience with tools such as Burp Suite, Nessus, Metasploit, Nmap, Kali Linux, etc.</li><li>Strong knowledge of OWASP, NIST, ISO 27001, and secure coding practices.</li><li>Excellent reporting and communication skills.</li><li>Candidates with relevant certifications will be preferred.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>What is your current salary?</li><li>What is your expected salary?</li></ul>Work Location: In person

VAPT Analyst

Simcoe IT

Company DescriptionVulSight is a web3 cybersecurity startup specializing in Penetration Testing, Web3 security, smart-contracts auditing and verification. We help teams ship safely across Move, Rust, and EVM ecosystems.Role DescriptionWe&rsquo;re building AI-powered tooling for Web3 audits and need a senior engineer to own the blockchain layer&mdash;smart contracts, node/indexing infra, and on-chain integrations that feed our models and products. Security expertise is a plus but not required. We care most about your ability to ship robust blockchain systems.Qualifications<ul><li>5+ years in backend/systems/software; 3+ years shipping on-chain (Aptos/Sui, Rust, EVM).</li><li>Strong in Rust (preferred for Solana/Aptos/Sui) or TypeScript/Go (EVM + infra).</li><li>Experience with indexers and Postgres.</li><li>Comfort with nodes/RPC/mempool mechanics and production ops.</li><li>Clear, pragmatic communication and ownership mindset.</li><li>Tooling chops: Foundry/Hardhat, Aptos/Sui CLI, Pyth/Chainlink consumers.</li></ul>Nice to Have<ul><li>Experience of all three: Move, Rust and EVM.</li><li>Familiarity with cryptography primitives, ABI/BCS, and data streaming.</li><li>Knowledge of security vulnerabilities in blockchain applications</li></ul>Job Type: Full-timePay: Rs400,000.00 - Rs600,000.00 per monthWork Location: In person

Senior Blockchain Engineer

Perform authorized red-team operations focused on network-level exploitation and lateral-movement simulations to test detection and response capabilities.Responsibilities<ul><li>Plan and execute network exploitation engagements within approved ROE.</li><li>Simulate realistic adversary techniques (initial access escalation, lateral movement, persistence) to test SOC and IR readiness.</li><li>Document findings, TTPs used, gaps observed, and remediation steps.</li><li>Collaborate with blue teams to run tabletop and post-ops improvement sessions.</li></ul>Required<ul><li>4+ years in red-team, penetration testing, or advanced network security roles.</li><li>Deep knowledge of Windows domain environments, network protocols, and common exploitation techniques.</li><li>Ability to write clear technical narratives and reproduce attack chains.</li><li>Strong operational security and ethics.</li></ul>Desired<ul><li>Certifications like OSCP, eJPT, or relevant red-team training.</li><li>Experience with C2 frameworks and detection evasion techniques (defensive context only).</li></ul>LegalAll activity is performed under strict authorization, with documented scopes and client consent.Job Type: Full-timeWork Location: In person

Red Team - Network Exploitation Specialist

ZIEL Global Private Limited

About the Role We&rsquo;re hiring an SQA Engineer to design and execute comprehensive testing frameworks ensuring our software meets the highest standards of performance, reliability, and security. You will lead both manual and automated testing across applications and infrastructure.Key Responsibilities<ul><li>Develop and execute test plans, cases, and automation suites</li><li>Conduct regression, performance, and integration testing</li><li>Perform security testing (OWASP, vulnerability scanning, penetration tests)</li><li>Integrate automated testing into CI/CD pipelines</li><li>Document bugs, risks, and testing results in detail</li><li>Collaborate with development, product, and DevOps teams to ensure quality delivery</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, IT, or related field</li><li>5+ years of software testing experience in enterprise or cloud environments</li><li>Expertise in automation tools (Selenium, Cypress, Playwright, Postman)</li><li>Strong SQL skills for data validation</li><li>Familiarity with Azure Test Plans, JMeter, or similar performance tools</li><li>Excellent communication and documentation skills</li></ul>Preferred<ul><li>Certifications such as ISTQB or similar</li><li>Experience testing microservices and containerized systems</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Are you available to join immediately?</li><li>How would you rate your English communication skills, spoken and written?</li><li>What are your salary expectations?</li></ul>Work Location: In person

Software Quality Assurance (SQA) Engineer

Ibix Global Tech

We are seeking a skilled Microsoft Engineer with proven expertise in Active Directory migrations, Office 365 security, and enterprise-grade email/network protection solutions. The ideal candidate will be responsible for implementing secure Microsoft environments, troubleshooting synchronization issues, and deploying best-in-class email and endpoint security platforms such as Darktrace, Bitdefender, Mimecast, Proofpoint, and Forcepoint.Key Responsibilities<ul><li>Plan, execute, and manage Microsoft Active Directory migrations and upgrades (on-prem, hybrid, or cloud).</li><li>Diagnose and resolve directory synchronization issues in hybrid environments.</li><li>Implement and manage Office 365 email security solutions (ATP, DKIM, SPF, DMARC, encryption, retention policies).</li><li>Deploy and integrate third-party security solutions including:</li><li>Darktrace (AI-driven threat detection &amp; response)</li><li>Bitdefender (endpoint security &amp; EDR/XDR)</li><li>Mimecast, Proofpoint, Forcepoint (email &amp; data security, DLP, phishing protection)</li><li>Other enterprise-grade tools as required</li><li>Perform Vulnerability Assessment and Penetration Testing (VAPT) &ndash; both automated and manual &ndash; to identify and mitigate risks.</li><li>Lead implementation of network security controls (firewalls, VPNs, IDS/IPS, zero-trust, endpoint protection).</li><li>Collaborate with client teams and vendors to deliver secure, reliable, and compliant environments.</li><li>Document architecture, configurations, and incident response playbooks.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, IT, or related field (or equivalent experience).</li><li>2&ndash;5 years of proven experience in Microsoft ecosystem and security domain.</li><li>Hands-on expertise in Active Directory migration, upgrade, and hybrid troubleshooting.</li><li>Strong administration knowledge of Microsoft 365 security &amp; compliance features.</li><li>Practical experience with enterprise-grade security platforms (Darktrace, Bitdefender, Mimecast, Proofpoint, Forcepoint, etc.).</li><li>Solid understanding of email security, endpoint security, and DLP solutions.</li><li>Proficiency in VAPT (manual &amp; automated testing) and remediation.</li><li>Familiarity with network security infrastructure (firewalls, IDS/IPS, SIEM).</li><li>Preferred certifications: Microsoft Security Administrator, Azure Administrator, Security+, CEH, or equivalent.</li></ul>What We Offer<ul><li>Competitive salary &amp; performance-based incentives</li><li>Opportunities for training and certifications in Microsoft and leading security solutions</li><li>Work on enterprise-level projects across Microsoft, email security, and network defense domains</li><li>Collaborative and fast-paced environment</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>What is your current monthly salary package in PKR?</li><li>What is your expected monthly salary package in PKR?</li><li>What is your notice time period? </li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Microsoft Engineer: 2 years (Required)</li></ul>Work Location: In person

Microsoft Engineer (Hybrid Role)

Webrange Solutions

Webrange Solutions is a global IT software solution company committed to delivering high-quality, cutting-edge solutions that empower businesses across various industries. With a presence in the US, Europe, the Middle East, Pakistan, and Africa, Webrange Solutions has built a vast network of over 100 clients. Our strategic partnerships with Microsoft, AWS, and IBM enable us to deliver best-in-class cloud, AI, and enterprise solutions. Our expertise spans data and AI, Custom Software Solutions, Cloud Solutions, ERP &amp; CRM, digital consulting and strategy, Business Process Outsourcing (BPO), and Emerging Technologies.This is a full-time, on-site role for a Cyber Security Intern located in Islamabad, Pakistan. The Cyber Security Intern will assist in securing digital assets, monitoring security threats, investigating security incidents, and applying security principles to ensure data protection. The position involves working closely with the cyber security team to develop and implement security measures, maintain network and information security, and participate in risk assessments and security audits.Key Responsibilities<ul><li>Assist in monitoring and analyzing security alerts, logs, and incidents.</li><li>Support vulnerability assessments, penetration testing, and threat detection.</li><li>Help configure and maintain firewalls, antivirus, and intrusion detection systems.</li><li>Participate in incident response, documentation, and risk mitigation efforts.</li><li>Research emerging cybersecurity threats, tools, and best practices.</li><li>Contribute to developing and enforcing security policies and procedures.</li><li>Could you collaborate with IT and development teams to strengthen overall system security?</li></ul>Requirements<ul><li>Currently pursuing or recently completed a degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>Basic understanding of network security, encryption, and common cyber threats.</li><li>Familiarity with security tools such as Wireshark, Nmap, Burp Suite, or Metasploit.</li><li>Knowledge of Linux/Windows administration and basic command-line operations.</li><li>Understanding of firewalls, IDS/IPS, and network protocols (TCP/IP, HTTP, DNS).</li><li>Experience with scripting languages (Python, Bash, or PowerShell) is a plus.</li><li>Awareness of ISO 27001, NIST, or OWASP standards is a bonus.</li><li>Strong analytical and problem-solving skills with attention to detail.</li><li>Ability to work independently and as part of a collaborative security team.</li></ul>Location<ul><li>Islamabad: Reliably commute or planning to relocate before starting work (Preferred).</li></ul>Job Type: Full-timePay: Rs20,000.00 - Rs25,000.00 per monthWork Location: In person

Cyber Security Intern

Explore 202+ Penetration tester offensive security in Islamabad this November. Find roles across top companies and apply now to boost your career.