data analyst

financial analyst

network security senior associate Jobs in Karachi

network security senior associate

business analyst

business intelligence analyst Jobs in Karachi

business intelligence analyst

security analyst

Bit Development Pvt Ltd

Job Title: SOC Analyst &ndash; IT Infrastructure &amp; Network SecurityWe are seeking a highly motivated SOC Analyst with 1&ndash;3 years of hands-on experience in Security Operations Center (SOC) functions, IT infrastructure security, and network security. The ideal candidate will have strong experience with SIEM platforms, security event analysis, threat detection, and incident response. This role requires close collaboration with IT and Information Security teams to protect the organization&rsquo;s critical assets.Key Responsibilities1. SIEM Implementation &amp; Continuous Monitoring<ul><li>Assist in the implementation, configuration, tuning, and optimization of SIEM solutions to improve security event collection, correlation, and visibility.</li><li>Continuously monitor SIEM dashboards and alerts to identify suspicious activities and potential threats.</li></ul>2. IT Infrastructure &amp; Network Security<ul><li>Support security initiatives across server infrastructure, applications, and network environments.</li><li>Collaborate with IT teams to assess and strengthen security controls across Data Centers, Cloud (Azure), O365, and On-Premises environments.</li></ul>3. Security Logging &amp; Monitoring<ul><li>Develop a strong understanding of logging mechanisms, log sources, and monitoring techniques.</li><li>Ensure accurate log collection, normalization, and retention across all supported environments for effective threat detection and forensic analysis.</li></ul>4. Security Tools Management<ul><li>Assist in the administration and maintenance of security tools, including:</li><li>SIEM platforms</li><li>IDS/IPS</li><li>Firewalls</li><li>Endpoint protection solutions</li><li>Vulnerability scanning tools</li></ul>5. Alert Management &amp; Incident Response Support<ul><li>Monitor and analyze security alerts from multiple platforms, performing initial triage and prioritization.</li><li>Escalate confirmed or suspected security incidents according to defined procedures.</li><li>Support incident investigations, containment, and remediation efforts in collaboration with Information Security and IT teams.</li><li>Provide timely updates and documentation during incident resolution.</li></ul>6. Threat Detection &amp; Proactive Security Activities<ul><li>Participate in proactive threat-hunting activities using available threat intelligence sources.</li><li>Investigate indicators of compromise (IOCs), emerging threats, and potential vulnerabilities within the environment.</li></ul>Required Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li><li>2&ndash;4 years of experience working as a SOC Analyst with a focus on IT infrastructure and network security.</li><li>Hands-on experience with SIEM platforms, preferably Wazuh.</li><li>Familiarity with CyberArk, Zabbix, and other SOC-related tools.</li><li>Strong understanding of logging, event correlation, and monitoring across hybrid environments.</li><li>Exposure to administration and monitoring of security tools such as IDS/IPS, firewalls, antivirus, and EDR solutions.</li></ul>The Ideal Candidate Will Be Able To<ul><li>Investigate, analyze, and respond to security incidents effectively.</li><li>Perform detailed log analysis and threat detection across multiple security platforms.</li><li>Triage, escalate, and document security incidents in accordance with established procedures.</li><li>Support incident response, recovery, and remediation activities.</li><li>Research and analyze threat intelligence, adversary TTPs using the MITRE ATT&amp;CK framework, and emerging malware trends.</li><li>Track, analyze, and report on newly disclosed CVEs and exploit activity.</li><li>Conduct risk assessments and maintain accurate risk registers.</li></ul>Work Location: In person

SOC Analyst – IT Infrastructure & Network Security

Systems Limited

<div>
 
 
 SOC Analyst &ndash; Level 1 (Tier 1)
 
 
 
 
 
 
 We are seeking a SOC Analyst &ndash; Level 1 to act as the frontline defender within our Security Operations Center (SOC). This role focuses on continuous monitoring, alert triage, initial investigation, and timely escalation of security incidents. The ideal candidate is detail-oriented, process-driven, and capable of working in a 24&times;7 operational environment.
 
 
 
 
 
 Location: Karachi, Islamabad, Lahore, Multan and Faisalabad
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Monitor SIEM/XDR platforms for security alerts and suspicious activities.
 </li>
 <li>
 Perform initial alert triage (true positive vs. false positive).
 </li>
 <li>
 Follow predefined playbooks and standard operating procedures (SOPs).
 </li>
 <li>
 Collect and analyze logs from endpoints, firewalls, email, and cloud systems.
 </li>
 <li>
 Create and update incident tickets with clear documentation.
 </li>
 <li>
 Escalate validated incidents to L2 with proper context and evidence.
 </li>
 <li>
 Handle common security events (malware, phishing, brute force, policy violations).
 </li>
 <li>
 Maintain SLA compliance and support continuous improvement of SOC processes.
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 
 
 
 <ul>
 <li>
 2&ndash;4 years of experience in SOC, IT Security, or IT Operations.
 </li>
 <li>
 Understanding of networking fundamentals (TCP/IP, DNS, HTTP).
 </li>
 <li>
 Basic knowledge of Windows/Linux systems.
 </li>
 <li>
 Familiarity with common cyber threats (phishing, ransomware, malware).
 </li>
 <li>
 Hands-on exposure to any SIEM or EDR tool.
 </li>
 <li>
 Strong analytical, documentation, and communication skills.
 </li>
 <li>
 Willingness to work in rotational shifts.
 </li>
 <li>
 Entry-level security certifications (Security+, SC-900, AZ-900) are a plus.
 </li>
 </ul>
 
 
</div>

Security Operations Center Analyst

<div>
 
 The ideal candidate will bring experience in cybersecurity, regulatory compliance, and data-driven analysis, and will play a key role in improving current processes while helping design new and efficient ways of working across the Information Security function
 
 
 
 
 
 Location: Karachi, Lahore, Islamabad, Multan, Faislabad.
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Gather and document business, technical, and regulatory requirements for cybersecurity initiatives.
 </li>
 <li>
 Translate complex cybersecurity and technical concepts into clear business requirements and process improvements.
 </li>
 <li>
 Document, analyse, and improve ServiceNow workflows for Information Security requests, including identifying automation opportunities.
 </li>
 <li>
 Support the documentation and enhancement of the Information Security Risk Assessment process.
 </li>
 <li>
 Work with the CISO Governance Manager to map legal, regulatory, and compliance requirements relevant to the security function.
 </li>
 <li>
 Review and map existing security policies and standards, identifying potential gaps.
 </li>
 <li>
 Develop dashboards, reports, and KPIs to support decision-making and track cybersecurity performance.
 </li>
 <li>
 Engage with stakeholders across Information Security, IT, business units, and vendors to gather requirements and validate solutions.
 </li>
 <li>
 Facilitate workshops, interviews, and process walkthroughs to ensure alignment and clarity.
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 
 
 
 <ul>
 <li>
 3&ndash;6 years of experience in Business Analysis, preferably within Cybersecurity, IT Security, or Risk &amp; Compliance environments.
 </li>
 <li>
 Strong experience in requirements gathering, process mapping, and stakeholder management.
 </li>
 <li>
 Familiarity with cybersecurity frameworks, governance, risk, and compliance (GRC) concepts.
 </li>
 <li>
 Experience working with ServiceNow workflows or similar ITSM platforms is preferred.
 </li>
 <li>
 Strong analytical, documentation, and reporting skills, including experience with dashboards and KPIs.
 </li>
 <li>
 Ability to translate technical security concepts into clear business language.
 </li>
 <li>
 Excellent communication and stakeholder engagement skills.
 </li>
 </ul>
 
 
</div>

CISO Business Analyst

<div>
 
 
 Line of Service
 
 
 Advisory
 
 
 
 
 Industry/Sector
 
 
 Not Applicable
 
 
 
 
 Specialism
 
 
 Technology Strategy
 
 
 
 
 Management Level
 
 
 Senior Associate
 
 
 
 
 Job Description &amp; Summary
 
 
 At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
 As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
 
 
 
 Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn&rsquo;t clear, you ask questions, and you use these moments as opportunities to grow.
 
 
 Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
 
 
 <ul>
 <li>
 &nbsp;Passionate for cyber security
 
 </li>
 <li>
 Degree in Cyber Security or other related disciplines e.g., Computer Science / Systems from a HEC recognized university
 
 </li>
 <li>
 Conduct network security assessments, security architecture &amp; design, and hardening activities.
 
 </li>
 <li>
 Strong knowledge of TCP/IP, network protocols, routing/switching, and secure network design principles.
 
 </li>
 <li>
 Hands-on experience of hardening firewalls (e.g. Palo Alto, Fortinet, Cisco), WAF and VPN technologies.
 
 </li>
 <li>
 Experience with IDS/IPS, Proxies, and network monitoring tools (e.g., SIEM, NDR etc).
 
 </li>
 <li>
 Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls).
 
 </li>
 <li>
 Knowledge of Cloud (AWS &amp; Azure) networking and security concepts
 
 </li>
 <li>
 Collaborate with cross‑functional PwC teams (cloud, infrastructure, risk, compliance) on complex engagements
 
 
 
 
 </li>
 </ul>
 
 Minimum years experience required:
 
 2-4 Years
 
 
 
 Additional / great to have:
 
 
 <ul>
 <li>
 Relevant certifications a plus (e.g., CISM, CCNA Security/CCNP Security, Fortinet NSE etc.).
 
 </li>
 <li>
 Prepare clear technical documentation and present findings/recommendations to stakeholders.
 
 </li>
 <li>
 Proven experience working in a client-facing, consulting, or project-based environment is an advantage.
 
 </li>
 <li>
 Strong analytical and problem-solving skills.
 
 </li>
 </ul>
 
 
 Required Skills
 
 
 
 
 
 Optional Skills
 
 
 Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}
 
 
 
 
 
 Desired Languages
 
 
 
 
 (If blank, desired languages not specified)
 
 
 
 
 
 
 Travel Requirements
 
 
 
 
 
 Available for Work Visa Sponsorship?
 
 
 
 
 
 Government Clearance Required?
 
 
 
 
 
 Job Posting End Date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
</div>

Network Security Senior Associate

Habib Bank AG Zurich

<div>
 
 
 Key Responsibilities:
 
 
 
 Maintain a thorough understanding of the bank's environment and ensure compliance with information security policies, directives, and regulatory requirements internally and externally. Stay updated on evolving best practices in cyber security risk management.
 
 
 &middot; Possess a comprehensive understanding and practical proficiency in the Secure Software Development Life Cycle.
 
 
 &middot; Evaluate the security architecture and design of business applications and related databases.
 
 
 &middot; Conduct timely risk assessments of applications to identify information security vulnerabilities prior to their deployment.
 
 
 &middot; Develop and oversee the application security program, providing recommendations for secure application architecture.
 
 
 &middot; Supervise and conduct due diligence and security baselining for newly introduced applications.
 
 
 &middot; Perform assessments of application security controls, vulnerability testing, and penetration testing.
 
 
 &middot; Ensure effective coordination, planning, and response to internal and external audits, as well as regulatory requirements, resolving audit findings promptly.
 
 
 &middot; Possess practical experience in conducting web and mobile application penetration testing according to OWASP top 10 and CWE/SANS top 25 standards, using Black-Box, Grey-Box, and White-Box methodologies.
 
 
 &middot; Conduct security assessments, code reviews, vulnerability scans, and penetration tests to identify vulnerabilities, weaknesses, and risks in web applications, APIs, and software components.
 
 
 &middot; Collaborate with development teams to address identified vulnerabilities, implement secure coding practices, and establish guidelines to safeguard application confidentiality, integrity, and availability.
 
 
 &middot; Stay updated on security trends, technologies, and best practices, integrating security controls into the software development lifecycle.
 
 
 &middot; Undertake assigned ad-hoc projects from the line manager.
 
 
 
 
 
 
 Requirements:
 
 
 
 &middot; Possess a minimum of two to three years of experience in application security.
 
 
 &middot; Bachelor&rsquo;s degree in Computer Science/IT/B.Tech/B. E or related fields
 
 
 &middot; Sound knowledge of ISO 27001, PCI DSS, SWIFT CSF, NIST or related standards and frameworks.
 
 
 &middot; Professional certifications such as CASE/ CASS/ CSSLP/ CEH etc. will be preferred.
 
 
 &middot; Demonstrate an understanding of information security and risk management concepts.
 
 
 &middot; Must have experience in Kubernetes (GKE, KUBECTL, HELM) and containers (Docker)
 
 
 &middot; Appreciate the value of diversity in the workplace and actively contribute to fostering an inclusive culture that enables individuals to realize their full potential and bring their authentic selves to work.
 
 
 &middot; Work independently, prioritize multiple tasks, and adapt to changes as required.
 
 
 &middot; Maintain composure and perform well in high-pressure and challenging situations.
 
</div>

Information Security Officer

Robust Support and Solutions

Robust Support &amp; Solutions is looking to hire &quot;Sr. Reporting Analyst&quot; for it's Karachi office.www.robustsns.comOffice Location: Fortune Tower, PECHS, BLOCK 6, KarachiWorking Hours: 10 AM to 7PM CST (8PM to 5AM Pakistan time), 6 days a weekKey Responsibilities: We are looking for a detail-oriented and data-driven professional to join our Reporting &amp; Analytics team. If you have a strong foundation in Python, Excel, and Power BI, and are passionate about transforming data into meaningful insights, this role is for you!Key Responsibilities:<ul><li>Develop, maintain, and optimize dashboards and reports in Power BI for various departments.</li></ul><ul><li>Automate repetitive data processing tasks using Python.</li></ul><ul><li>Perform advanced data analysis and modeling in Excel, including pivot tables, Power Query, and advanced formulas.</li></ul><ul><li>Collaborate with stakeholders to understand reporting requirements and deliver actionable insights.</li></ul><ul><li>Ensure data accuracy, integrity, and accessibility across all reports.</li></ul>Qualifications &amp; Requirements:<ul><li>Minimum 8 years of professional experience in; Python, MS Excel &amp; Power BI</li><li>Strong analytical and problem-solving skills.</li><li>Effective communication and presentation skills.</li><li>Ability to work independently and within a team.</li><li>Familiarity with SQL or database querying.</li><li>Experience with automation tools or APIs.</li></ul>Job Type: Full-timePay: Rs100,000.00 - Rs150,000.00 per monthApplication Question(s):<ul><li>Are you willing to do an ONSITE, night shift (8pm-5am, 6 days a week)?</li><li>Please share your current/ last drawn salary and your salary expectations for this role?</li><li>Do you have good command on MS Excel Microsoft Excel skills (VLOOKUP &amp; XLOOKUP, Pivot Table Reports, Sumifs, Countifs, Conditional Formating &amp; Index-Match) ??</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Data Reporting: 8 years (Required)</li></ul>Location:<ul><li>Karachi (Required)</li></ul>Work Location: In person

Senior Reporting Analyst

A. F. Ferguson & Co. (a member firm of the PwC network)

<div>
 
 
 Description
 
 
 
 At A.F.Ferguson &amp; Co, our vision is to be the first choice employer for professional staff. As a trusted business advisor, we work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths.
 
 
 At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
 
 
 
 Those in penetration testing at PwC will focus on penetration testing (or pen testing) which is a security exercise where a cybersecurity consultant attempts to find and exploit vulnerabilities in a computer system. The purpose of this simulated attack is to identify any weak spots in a system's defences which attackers could take advantage of.
 
 
 Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn&rsquo;t clear, you ask questions, and you use these moments as opportunities to grow.
 
 
 
 
 
 Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
 
 
 
 
 <ul>
 <li>
 Degree in Cyber Security or other related disciplines e.g., Computer Science / Systems from a HEC recognized university
 </li>
 <li>
 Up to 3 years of relevant experience in cybersecurity, preferably in vulnerability assessment, penetration testing, or a related domain.
 </li>
 <li>
 Basic understanding of networking concepts, protocols, and architectures (TCP/IP, HTTP, DNS, etc.).
 </li>
 <li>
 Familiarity with operating systems such as Windows, Linux, and Unix.
 </li>
 <li>
 Exposure to common security tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, or similar tools is preferred but not mandatory.
 </li>
 <li>
 Flexible in assessing different platforms such as PHP, ASP, NodeJS, and Java.
 </li>
 <li>
 Excellent understanding of OWASP TOP 10 and SANS TOP 20.
 </li>
 <li>
 Stay current on emerging technology trends and threat landscape
 </li>
 </ul>
 
 
 Additional / great to have:
 
 
 <ul>
 <li>
 Having practical cyber security certifications such as CEH, eCCPT, eJPT eWAPT, OSCP, OSCE
 </li>
 <li>
 Experience of bug bounty programs, security research, red team and adversary.
 </li>
 <li>
 Prepare clear technical documentation and present findings/recommendations to stakeholders.
 </li>
 <li>
 Proven experience working in a client-facing, consulting, or project-based environment is an advantage.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 </ul>
 
 
 
 
 PwC A.F. Ferguson &amp; Co. is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all.
 
</div>

Penetration Testing Senior Associate

Explore 225+ Security analyst in Karachi this March. Find roles across top companies and apply now to boost your career.