sqa engineer

business analyst

internal auditor

data analyst

it support engineer

security analyst

HugoBank

<div>Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.
Requirements
Threat Monitoring &amp; Detection:<ul>
<li>Monitor and analyze SIEM alerts to detect potential security incidents.</li>
<li>Conduct log analysis from firewalls, servers, applications, and endpoint security tools.</li>
<li>Develop and refine correlation rules and use cases to improve threat detection.</li>
<li>Utilize threat intelligence sources to enhance anomaly detection and response.</li>
</ul>Incident Response:<ul>
<li>Perform initial triage and incident handling to assess potential threats.</li>
<li>Conduct root cause analysis to determine the impact and scope of security events.</li>
<li>Maintain detailed incident documentation for compliance and reporting purposes.</li>
</ul>Vulnerability Management:<ul>
<li>Perform vulnerability scanning and risk assessment to identify security gaps.</li>
<li>Support penetration testing efforts and assist in remediation strategies.</li>
<li>Develop and implement risk mitigation plans to reduce attack vectors.</li>
</ul>Security Policy &amp; Compliance:<ul>
<li>Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations).</li>
<li>Conduct security awareness training for internal teams.</li>
<li>Monitor compliance with security policies and recommend necessary improvements.</li>
</ul>Research &amp; Continuous Improvement:<ul>
<li>Stay updated on emerging threats, attack techniques, and cybersecurity trends.</li>
<li>Continuously optimize SIEM correlation rules and fine-tune detection mechanisms.</li>
<li>Enhance security operations processes to improve efficiency.</li>
</ul>Collaboration &amp; Third-Party Security:<ul>
<li>Work closely with internal security teams and third-party service providers to correlate threat intelligence.</li>
Collaborate with IT and business units to enhance overall cyber resilience. 
<li>
</li></ul>Requirements 
<ul>
<li>Bachelor&rsquo;s degree in Computer Science, IT, Cybersecurity, or a related field.</li>
<li>4-6 years of experience in infrastructure security, SIEM monitoring, or threat intelligence.</li>
<li>Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint security.</li>
<li>Proficiency in using SIEM solutions (QRadar, Splunk, ArcSight, Wazuh, etc.).</li>
<li>Expertise in vulnerability assessment, threat modeling, and risk analysis.</li>
<li>Hands-on experience with security tools (Metasploit, Burp Suite, Nessus, etc.).</li>
<li>Experience in policy development, security guidelines, and compliance frameworks.</li>
<li>Proficiency in scripting languages (Python, PowerShell, SPL, SQL) for security automation.</li>
Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus. 
<li>
</li></ul>Objectives &amp; KPIs<ul>
<li>Mean Time to Detect (MTTD): Average time taken to detect, analyze, and escalate security incidents.</li>
<li>Incident Resolution Rate: Percentage of incidents resolved within predefined SLAs.</li>
<li>Alert Accuracy: Ratio of false positives vs. true positives identified in SIEM alerts.</li>
<li>SIEM Optimization: Percentage of correlation rules and use cases updated or improved.</li>
<li>Root Cause Analysis (RCA) Completion: Percentage of incidents with a thorough RCA report.</li>
<li>Rule Tuning Frequency: Regular enhancements to improve SIEM efficiency and reduce unnecessary alerts.</li>
<li>Regulatory Compliance: Percentage of adherence to SBP regulations, PCI DSS, ISO 27001, and security standards.</li></ul></div>

Information Security Analyst

Mashreq

<div>
 
 Job Purpose
 
 
 
 
 
 
 The Senior Analyst Fraud Detection is responsible for the performance of all Fraud related functions within the Fraud Risk management Unit whilst ensuring that all these activities are carried out with maximum efficiency, security and control in accordance with established procedures and agreed service standards. The role requires a thorough understanding of 1Link, Visa, Mastercard, and FraudGuard systems. This position operates on a 24/7 basis, ensuring continuous surveillance and swift response to potential fraud incidents.
 
 
 
 
 Key result Areas
 
 
 
 
 
 <ul>
 <li>
 Monitoring of issuing and acquiring transactions for suspicious activities.
 </li>
 <li>
 Look for unusual patterns or anomalies that could indicate fraudulent activity, such as sudden spikes in transaction volume, transactions from unusual locations, or multiple failed attempts.
 </li>
 <li>
 Identify and prevent fraudulent activities using 1Link, Visa, Mastercard, and FraudGuard systems.
 </li>
 <li>
 Respond promptly to alerts and take necessary actions to mitigate risks.
 </li>
 <li>
 Follow organizational policies and regulatory requirements during monitoring activities.
 </li>
 <li>
 Ensure all alerts are reviewed within the specified timeline.
 </li>
 <li>
 Contact customers for transaction confirmation on suspicious activities to verify legitimacy.
 </li>
 <li>
 Block and unblock cards according to established procedures.
 </li>
 <li>
 Document and report any identified patterns and anomalies to the line manager.
 </li>
 <li>
 Maintain the MIS of daily fraud reports and document daily activities.
 </li>
 <li>
 Ensure timely SAFE and TC40 reporting to respective Schemes.
 </li>
 <li>
 Handle any other additional/temporary responsibility as assigned by the Manager to support the unit's needs.
 </li>
 </ul>
 
 
 
 Knowledge, Skills and Experience
 
 
 
 
 
 <ul>
 <li>
 In-depth knowledge of 1Link, Visa, Mastercard, and FraudGuard systems.
 </li>
 <li>
 Understanding of regulatory requirements and compliance standards related to fraud detection and prevention.
 </li>
 <li>
 Ability to communicate both verbally and in writing for reporting and collaboration.
 </li>
 <li>
 Ability to solve problems efficiently and effectively under pressure.
 </li>
 <li>
 Analytical skills to interpret data and identify trends.
 </li>
 <li>
 Minimum of 2-3 years of experience in fraud detection and transaction monitoring.
 </li>
 <li>
 Experience in a 24/7 operational environment.
 </li>
 </ul>
 
 
</div>

Senior Fraud Detection Analyst (Mashreq Digital Bank Pakistan)

Alykas

Alykas provides intelligent, end-to-end IT and cybersecurity solutions for mid-market and enterprise organizations. Our mission is to deliver measurable outcomes that reduce risk, enhance efficiency, and transform technology into a competitive advantage. We offer a comprehensive suite of services including Managed IT Services, Cloud &amp; Data Center Solutions, IT Advisory &amp; Consulting, and Cybersecurity Solutions. Our team of culturally aligned engineers ensures consistent, expert support tailored to meet the complex demands of today's businesses.OverviewAs a SOC Analyst at Alykas, you will play a vital role in protecting our clients from cyber threats by delivering advanced security monitoring, analysis, and incident response. Operating in a multi-tenant Security Operations Center (SOC), you&rsquo;ll support multiple customers using a wide range of cybersecurity technologies including SIEM, EDR, MFA, and more.Your responsibilities will include threat detection, incident triage, and proactive threat hunting. You&rsquo;ll also leverage tools such as PAM, email security, firewalls, and identity and access management (IAM) systems to strengthen client security postures. Your ability to communicate effectively with clients and collaborate across teams will be key to success in this role.Must-Haves<ul><li>Minimum 2 years of experience in a Security Operations Center (SOC)</li><li>Proficiency with endpoint detection tools like SentinelOne, CrowdStrike, or Microsoft Defender</li><li>Hands-on experience with incident response and ticketing systems</li><li>Strong client-facing communication skills</li><li>Familiarity with firewall technologies</li></ul>Experience With<ul><li>SIEM platforms such as QRadar, Splunk, or AlienVault</li></ul>Plusses<ul><li>Experience with automation platforms (SOAR) and scripting (e.g., Python)</li><li>Exposure to Vulnerability Management and SCCM</li><li>Background in Cyber Threat Hunting (CTH) and Cyber Threat Intelligence (CTI)</li><li>Certifications such as Security+, CySA+, CISSP, or CEH</li><li>Knowledge of identity and access control, especially Active Directory</li></ul>Key Responsibilities<ul><li>Monitor and analyze security alerts using SIEM tools</li><li>Conduct initial triage and assess severity of incidents</li><li>Investigate indicators of compromise (IOCs) and document findings</li><li>Respond to incidents following established protocols and escalate when necessary</li><li>Collaborate with internal teams to resolve security issues</li><li>Maintain detailed documentation of investigations and response actions</li><li>Stay current with emerging threats and security technologies</li></ul>Benefits<ul><li>Competitive salary based on experience</li><li>Generous performance-based bonus program</li><li>Comprehensive benefits package including health insurance and paid time off</li><li>Collaborative work environment at world-class, state-of-the-art service delivery centers</li><li>Company-sponsored career certifications to support your professional growth</li><li>Unlimited lab access to help you deepen your technical expertise and hands-on skills</li></ul>Join Alykas and be part of a mission-driven team committed to defending digital assets and empowering secure business operations. Apply today and take the next step in your cybersecurity career!Job Type: Full-timePay: Rs120,000.00 - Rs170,000.00 per monthWork Location: In person

SOC Analyst

Hiring Talent

Job DescriptionResponsibilities:<ul><li>Assist in monitoring and analyzing security events and alerts using SIEM tools, particularly Wazuh, under guidance.</li><li>Support real-time network traffic analysis using tools like Security Onion to help identify suspicious activity.</li><li>Help collect and review logs from servers, firewalls, IDS/IPS, and endpoints for security-relevant information.</li><li>Participate in incident response processes by assisting with evidence gathering and documentation.</li><li>Learn and contribute to the tuning of SIEM rules and alert logic for improved detection accuracy.</li><li>Gain experience in managing virtual lab environments and supporting security infrastructure.</li><li>Work alongside team members to monitor and review firewall configurations using pfSense.</li><li>Assist in basic threat hunting activities and identification of indicators of compromise (IOCs).</li><li>Collaborate with senior analysts and engineers to learn detection use case development and response workflows.</li><li>Stay updated with current cybersecurity threats, vulnerabilities, and attacker techniques.</li></ul>Requirements:<ul><li>Strong foundational knowledge of Linux systems and proficiency with basic command-line tools.</li><li>Good understanding of networking fundamentals, including TCP/IP, DNS, routing, and firewall concepts.</li><li>Eagerness to learn and work with tools like Wazuh, Security Onion, Proxmox, and pfSense.</li><li>Interest in log analysis, SIEM systems, and network security monitoring.</li><li>Strong willingness to learn, with attention to detail and solid communication skills.</li><li>Coursework, personal projects, or certifications in cybersecurity are a plus.</li></ul>Job Type: Full-timeWork Location: In person

Cybersecurity Analyst ( Offensive)

<div>
 Are you an experienced cybersecurity professional eager to take on a key role in securing Digital Retail Banking (DRB) operations? We are looking for a Cybersecurity Specialist to lead the implementation and monitoring of SIEM/SOC solutions, conduct security testing, and manage security tools such as antivirus, endpoint protection, and data leak prevention. This role ensures compliance with security frameworks and enforces cybersecurity policies to protect critical banking infrastructure. If you have a passion for threat management, vulnerability assessments, and security architecture, this is your chance to make a real impact!
 
 
 
 
 Requirements
 
 
 
 
 Threat &amp; Incident Management:
 
 
 <ul>
 <li>
 Identify, assess, and mitigate cybersecurity threats across digital banking platforms
 </li>
 <li>
 Support incident response by analyzing security events and escalating issues
 </li>
 <li>
 Manage access control policies to prevent unauthorized access to sensitive data.
 
 
 </li>
 </ul>
 Security Tools Management:
 
 
 <ul>
 <li>
 Deploy, configure, and manage SIEM/SOC solutions (QRadar, Splunk, ArcSight, Wazuh, etc.)
 </li>
 <li>
 Maintain and optimize antivirus, endpoint protection, and data leak prevention tools
 </li>
 <li>
 Continuously evaluate security tools to enhance detection and response capabilities
 
 
 </li>
 </ul>
 Technical Security Implementation:
 
 
 <ul>
 <li>
 Design and implement network security controls (firewalls, IDS/IPS, VPNs)
 </li>
 <li>
 Conduct vulnerability assessments and penetration tests on networks, applications, and systems
 </li>
 <li>
 Implement patch management strategies to address security gaps
 
 
 </li>
 </ul>
 Security Architecture &amp; Compliance:
 
 
 <ul>
 <li>
 Ensure compliance with MITRE ATT&amp;CK, NIST, PCI-DSS, ISO 27001, and regulatory standards
 </li>
 <li>
 Monitor security event logs and analyze anomalies for proactive threat detection
 </li>
 <li>
 Work with cross-functional teams to integrate security best practices across cloud and on-prem environments
 
 
 </li>
 </ul>
 Research &amp; Development:
 
 
 <ul>
 <li>
 Track emerging cyber threats and enhance detection techniques
 </li>
 <li>
 Conduct threat intelligence analysis and proactively implement risk mitigation measures
 </li>
 <li>
 Lead cybersecurity awareness initiatives and train internal teams on security protocols
 
 
 </li>
 </ul>
 Documentation &amp; Reporting:
 
 
 <ul>
 <li>
 Maintain system documentation, incident response playbooks, and escalation procedures
 </li>
 <li>
 Generate security reports and dashboards for continuous security posture improvement
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field
 </li>
 <li>
 7-9 years of experience in infrastructure security, cybersecurity operations, or penetration testing
 </li>
 <li>
 Expertise in SIEM implementation &amp; security monitoring using QRadar, Splunk, ArcSight, Wazuh, or similar platforms
 </li>
 <li>
 Strong knowledge of network security protocols, firewalls, IDS/IPS, VPNs, and endpoint security
 </li>
 <li>
 Hands-on experience with security testing tools (Metasploit, Burp Suite, Nessus, etc.)
 </li>
 <li>
 Proficiency in scripting and automation (Python, PowerShell, Bash) to improve security controls
 </li>
 <li>
 Experience with cloud security best practices (AWS, Azure, Google Cloud) and securing virtual environments
 </li>
 <li>
 Familiarity with forensic investigation techniques, malware analysis, and threat intelligence
 </li>
 <li>
 Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus
 </li>
 </ul>
</div>

Information Security Lead

<div>Are you an experienced cybersecurity professional eager to take on a key role in securing Digital Retail Banking (DRB) operations? We are looking for a Cybersecurity Specialist to lead the implementation and monitoring of SIEM/SOC solutions, conduct security testing, and manage security tools such as antivirus, endpoint protection, and data leak prevention. This role ensures compliance with security frameworks and enforces cybersecurity policies to protect critical banking infrastructure. If you have a passion for threat management, vulnerability assessments, and security architecture, this is your chance to make a real impact!
Requirements
Threat &amp; Incident Management:<ul>
<li>Identify, assess, and mitigate cybersecurity threats across digital banking platforms.</li>
<li>Support incident response by analyzing security events and escalating issues.</li>
Manage access control policies to prevent unauthorized access to sensitive data. 
<li>
</li></ul>Security Tools Management:<ul>
<li>Deploy, configure, and manage SIEM/SOC solutions (QRadar, Splunk, ArcSight, Wazuh, etc.).</li>
<li>Maintain and optimize antivirus, endpoint protection, and data leak prevention tools.</li>
<li>Continuously evaluate security tools to enhance detection and response capabilities.</li>
</ul>Technical Security Implementation:<ul>
<li>Design and implement network security controls (firewalls, IDS/IPS, VPNs).</li>
<li>Conduct vulnerability assessments and penetration tests on networks, applications, and systems.</li>
<li>Implement patch management strategies to address security gaps.</li>
</ul>Security Architecture &amp; Compliance:<ul>
<li>Ensure compliance with MITRE ATT&amp;CK, NIST, PCI-DSS, ISO 27001, and regulatory standards.</li>
<li>Monitor security event logs and analyze anomalies for proactive threat detection.</li>
<li>Work with cross-functional teams to integrate security best practices across cloud and on-prem environments.</li>
</ul>Research &amp; Development:<ul>
<li>Track emerging cyber threats and enhance detection techniques.</li>
<li>Conduct threat intelligence analysis and proactively implement risk mitigation measures.</li>
<li>Lead cybersecurity awareness initiatives and train internal teams on security protocols.</li>
</ul>Documentation &amp; Reporting:<ul>
<li>Maintain system documentation, incident response playbooks, and escalation procedures.</li>
<li>Generate security reports and dashboards for continuous security posture improvement.</li>
</ul>Requirements<ul>
<li>Bachelor&rsquo;s degree in Computer Science, IT, Cybersecurity, or a related field.</li>
<li>7-9 years of experience in infrastructure security, cybersecurity operations, or penetration testing.</li>
<li>Expertise in SIEM implementation &amp; security monitoring using QRadar, Splunk, ArcSight, Wazuh, or similar platforms.</li>
<li>Strong knowledge of network security protocols, firewalls, IDS/IPS, VPNs, and endpoint security.</li>
<li>Hands-on experience with security testing tools (Metasploit, Burp Suite, Nessus, etc.).</li>
<li>Proficiency in scripting and automation (Python, PowerShell, Bash) to improve security controls.</li>
<li>Experience with cloud security best practices (AWS, Azure, Google Cloud) and securing virtual environments.</li>
<li>Familiarity with forensic investigation techniques, malware analysis, and threat intelligence.</li>
<li>Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus.</li></ul></div>

VRG Pvt. Ltd.

&middot; Working with all business units to determine possible risks and risk management process, acquiring the correct technology and analyzing IT security threats and their mitigation.&middot; Ensuring the newly acquired technology complies with the SBP &amp; PTA IT security regulations.&middot; Planning, designing and implementing IT Security parameters on the Network, Applications and infrastructure of the company.&middot; Ensuring that no internal breaches or misuse of data take place.&middot; Individual must be able to multi task and work Knowledge of the following, Operating Systems, Virtualization, Authentication technologies (1 or more) - AD, Single Sign-On, Federation, Radius, Multi-factor etc. Relational Databases and familiarity of huge data systems, backups and replication System design principles and architecture, secure design, system hardening, compliance, disaster recovery, ITSM principles.&middot; Individual will provide a variety of basic Information Security administration services working with a web-based request management tools and problem management tools.&middot; Additional tasks could include executing and producing customer and information security reports to share with management.Requirement:Education: Masters / Bachelors in Computer Science, Information technology, or a related field.Age Limit: 30 to 45Experience:7+ Years in risk management, information security or programming.An exceptional understanding of information security management frameworks such as ISO/IEC 27001 and NIST.Good understanding of scripting and source code programming languages, such as C#, C++, .Net and Java.Good understanding of current legislation and regulations.Skills:Certified CISM or CISSPProject Management and leadership skills.First rate written and verbal communication skills.Please share your resume at adeel.ahmed@vrgworld.comJob Type: Full-timeWork Location: In person

Cyber Security Manager (Immediate Hiring)

Explore 340+ Security analyst in Karachi this October. Find roles across top companies and apply now to boost your career.

340 security analyst jobs IN Karachi

Information Security Analyst

Senior Fraud Detection Analyst (Mashreq Digital Bank Pakistan)

SOC Analyst

Cybersecurity Analyst ( Offensive)

Information Security Lead

Information Security Lead

Cyber Security Manager (Immediate Hiring)