business analyst

security guard

admin analyst

data analyst

internal auditor

security analyst

VentureDive

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

Penetration Tester

Techbridge Consultancy Services

Job Location: Gulberg, Lahore (On-Site) Experience Required: 2&ndash;3 Years Salary: Up to 110,000 PKRResponsibilities:Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:<ul><li>SOC monitoring coverage for any of the following shifts: EST Time 8:00am &ndash; 4:00pm (PST 5:00pm &ndash; 1:00am), 4:00pm &ndash; 12:00am (PST 1:00am &ndash; 9:00am), 12:00am &ndash; 8:00am (PST 9:00am &ndash; 5:00pm); the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats</li><li>In-depth analysis of security events, alerts and incidents</li><li>Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats</li><li>Analyzing logs, network traffic and data to identify potential threats and vulnerabilities</li><li>Development security dashboards and reporting; compile threat intelligence reports and manage log data</li><li>Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)</li><li>Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)</li><li>Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)</li><li>Firewall rules configuration and optimization</li><li>SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)</li><li>Technical writing and security policy development</li><li>Staying current on industry trends, keeping up-to-date with relevant CVE&rsquo;s and the evolving threat landscape</li><li>Conducting vulnerability scans of network and applications</li><li>Keeping company systems up-to-date with current security patches</li><li>Recommending security improvements to line managers or senior management</li></ul>Requirements:<ul><li>Strong understanding of cybersecurity principles and the SOC environment</li><li>Bachelor&rsquo;s degree in cyber security, computer sciences or equivalent</li><li>Good understanding of vulnerability management tools and techniques</li><li>Good understanding of Windows, Linux and macOS operating systems and endpoints</li><li>Knowledge of modern problem-solving skills, and keen attention to detail</li><li>Good understanding of the modern security in SDLC practices</li><li>Capable of Balancing multiple priorities and remaining flexible in a changing environment</li><li>Good communication and interpersonal skills</li><li>Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)</li></ul>Other duties may include:&middot; Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)&middot; Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services&middot; Personnel are required to work on-site; remote or hybrid work options will not be available&middot; Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services&middot; Personnel must not work more than 12 consecutive hours per shift&middot; Personnel are required to adhere to internal cybersecurity and IT policies and standards&middot; Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer dataJob Type: Full-timeApplication Question(s):<ul><li>Are you comfortable working onsite in any of the following SOC shift timings?</li><li>Are you comfortable with an on-site role, as this position is not remote or hybrid?</li><li>Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?</li><li>Are you fluent in English, both written and spoken?</li><li>Are you from Lahore? (Yes/No)</li></ul>Work Location: In person

SOC Analyst

Magnatec Systems Private Limited

About the RoleWe are looking for a skilled Cyber Security Engineer to protect our systems, networks, and data from potential threats. The ideal candidate will be responsible for implementing security measures, monitoring vulnerabilities, and ensuring a secure IT environment, with a strong focus on cloud security.Key Responsibilities<ul><li>Design, implement, and manage security systems and solutions</li><li>Monitor networks and systems for security breaches and vulnerabilities</li><li>Conduct risk assessments and recommend mitigation strategies</li><li>Implement and manage firewalls and IDS/IPS systems</li><li>Perform security audits, penetration testing, and vulnerability assessments</li><li>Respond to security incidents and ensure timely resolution</li><li>Ensure compliance with security policies, standards, and best practices</li><li>Collaborate with IT teams to secure infrastructure and applications</li><li>Manage and secure cloud environments (AWS, Azure, GCP)</li><li>Stay updated with the latest cyber security trends and threats</li></ul>Requirements<ul><li>4&ndash;5 years of experience in cyber security or related roles</li><li>Strong knowledge of network security, firewalls, VPNs, and encryption</li><li>Hands-on experience with cloud platforms (AWS, Azure, or GCP)</li><li>Familiarity with security tools (SIEM, IDS/IPS, antivirus, etc.)</li><li>Understanding of operating systems (Windows, Linux)</li><li>Experience with vulnerability assessment and penetration testing</li><li>Knowledge of security frameworks and standards (ISO 27001, NIST, etc.)</li><li>Strong analytical and problem-solving skills</li></ul>Preferred / Good to Have<ul><li>Certifications like CEH, CISSP, Security+</li><li>Experience in cloud security architecture and best practices</li><li>Knowledge of DevSecOps practices</li></ul>Job DetailsJob Type: Full-time (On-site)Location: Johar Town, LahoreTimings: 9:00 AM &ndash; 6:00 PMWork Location: In person

Cyber Security Engineer

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives
 
 
 Description: This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
 </li>
 <li>
 Participate in red team and automated pentest exercises internally or by third party.
 </li>
 <li>
 Active coordination for any third party penetration testing exercises.
 </li>
 <li>
 Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
 </li>
 <li>
 Coordination with IT infrastructure &amp; development teams for remediation.
 </li>
 <li>
 Reviewing application design and flow to identify business logic flaws.
 </li>
 <li>
 Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
 </li>
 <li>
 Support development teams for secure coding practices.
 </li>
 <li>
 Perform Cloud security review and prepare reports with gaps and remediation guidelines.
 </li>
 <li>
 Fair understanding with prompt injection, adversarial input, model inversion, hallucination attacks for LLM testing
 </li>
 <li>
 Familiarly with Gen-AI applications security assessment.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 EducationBachelors Degree in IT/CS/Software Eng./TelecomExperience3-5 years in IT Security fieldSkills and Abilities-- Must have a passion to work in the IT Security field
 
 
 <ul>
 <li>
 Does have experience in
 </li>
 <li>
 Penetration testing
 </li>
 <li>
 Vulnerability Assessment
 </li>
 <li>
 Burp Pro and other pentest tools
 </li>
 <li>
 Source Code Analysis tools
 </li>
 <li>
 OWASP strong understanding
 
 
 </li>
 </ul>
 '-- Must have good presentation skills
 
 
 <ul>
 <li>
 OSCP/OSWP/CEH (Practical) certification is required.Reporting Time03:00 PM-12:00 am (PKST)
 </li>
 </ul>
</div>

IT Security Specialist, IT

NKU Technologies Pvt.Ltd.

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

VaporVM

<div>
 
 
 Role Summary:
 
 
 
 Responsible for implementing and managing
 
 Data Loss Prevention (DLP)
 
 solutions using
 
 Microsoft Purview (MIP/AIP)
 
 and
 
 Forcepoint DLP
 
 to protect sensitive organizational data.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Design and enforce
 
 DLP policies
 
 across endpoint, email, web, and cloud
 </li>
 <li>
 Implement
 
 Microsoft Information Protection (MIP)
 
 (sensitivity labels, auto-labeling)
 </li>
 <li>
 Manage and tune
 
 Forcepoint DLP
 
 policies and incidents
 </li>
 <li>
 Monitor, investigate, and respond to
 
 data leakage alerts
 
 </li>
 <li>
 Ensure compliance with
 
 GDPR, ISO 27001, PCI-DSS
 
 </li>
 <li>
 Integrate DLP with
 
 SIEM (e.g., Sentinel)
 
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Hands-on experience with
 
 Microsoft Purview (MIP/AIP)
 
 and
 
 Forcepoint DLP
 
 </li>
 <li>
 Knowledge of
 
 data classification, encryption, and cloud security (M365/Azure)
 
 </li>
 <li>
 3&ndash;6+ years in cybersecurity (with DLP focus preferred)
 </li>
 </ul>
 
 
 
 
 
 Preferred Certifications
 
 
 <ul>
 <li>
 Microsoft
 
 SC-400 / SC-200
 
 </li>
 <li>
 Forcepoint DLP Certification
 </li>
 </ul>
 
 
</div>

Microsoft Security DLP Specialist

Explore 259+ Security analyst in Lahore this May. Find roles across top companies and apply now to boost your career.