Pak-Arab Refinery Limited (PARCO)
Karachi New Opportunity Official website
Opportunity Information
Reference No.

832

Number of Post(s)

1

Type of Employer

Federal Government Corporation/ Public Sector Company

Level

Experienced Professional

Placement

On Site

Location

Karachi

The Role

PARCO is seeking an IT SOC Analyst on contractual basis at its Corporate Headquarters, Karachi. The role conducts offensive security assessments, red team exercises, penetration testing and vulnerability assessments, and manages the organization's Vulnerability Assessment/ Vulnerability Management Program.


•Conduct red-team exercises, penetration testing, vulnerability assessments and security testing across applications, APIs, networks, infrastructure, cloud and other technology environments •Manage the end-to-end Vulnerability Assessment and Vulnerability Management Program, including planning and scheduling, vulnerability scanning, assessment and validation, risk-based prioritization, remediation tracking and retesting and closure validation •Identify, validate and assess vulnerabilities and potential attack paths using automated tools and manual testing techniques •Perform manual penetration testing of websites, services, applications, APIs, infrastructure, networks, cloud environments, IoT devices and mobile applications •Coordinate with IT, infrastructure, application and other relevant teams to ensure timely remediation of identified vulnerabilities •Validate completed remediation actions and ensure vulnerabilities are closed in accordance with defined risk and compliance requirements •Prepare technical security assessment reports, risk ratings, management dashboards and practical remediation recommendations •Monitor emerging vulnerabilities, exploits, threats and attack techniques and assess their potential impact on the organization •Continuously improve security-testing methodologies, vulnerability-management processes, offensive-security capabilities and related security controls •Develop scripts, tools and methodologies to improve and automate red-teaming, vulnerability discovery, validation and exploitation activities

Applicants General Eligibility & Requirements
Required Experience

4+ years

Education, Experience and Skills Requirements
Required Education Level/ Field of Study
  • Bachelor 16 Years: Information Security, Computer Science, Information Technology
Required Experience

•Minimum 4 years of relevant hands-on experience in information security, offensive security or a related field •Hands-on experience in red teaming, penetration testing, vulnerability assessments and other offensive security activities •Experience managing or contributing to an enterprise-level Vulnerability Assessment or Vulnerability Management Program •Experience in risk-based vulnerability prioritization, remediation tracking, validation and management reporting •Experience conducting security testing of web applications and services, APIs, networks and infrastructure, cloud environments, mobile applications and IoT devices •Experience preparing security assessment reports and presenting findings to technical and management stakeholders Preferred: •Experience in Oil and Gas, Banking and Financial Services, Telecommunications, Technology and IT Services, Critical Infrastructure or other highly regulated or security-sensitive industries

Skills

Penetration Testing, Red Teaming, Vulnerability Assessment, Vulnerability Management, Burp Suite, Nmap, Nessus/ Qualys, Metasploit, OWASP Top 10, API Security, Cloud Security Testing, Active Directory Security, Network Security, Python, Bash

Required Professional Registration(s)/ License(s)

•Relevant certification such as OSCP, CEH or equivalent required

Any Other Requirements or Preferences

•Contractual position

Similar Opportunities
Application

No application fee

Similar Opportunities