Opportunity Information
832
1
Federal Government Corporation/ Public Sector Company
Experienced Professional
On Site
Karachi
The Role
PARCO is seeking an IT SOC Analyst on contractual basis at its Corporate Headquarters, Karachi. The role conducts offensive security assessments, red team exercises, penetration testing and vulnerability assessments, and manages the organization's Vulnerability Assessment/ Vulnerability Management Program.
•Conduct red-team exercises, penetration testing, vulnerability assessments and security testing across applications, APIs, networks, infrastructure, cloud and other technology environments •Manage the end-to-end Vulnerability Assessment and Vulnerability Management Program, including planning and scheduling, vulnerability scanning, assessment and validation, risk-based prioritization, remediation tracking and retesting and closure validation •Identify, validate and assess vulnerabilities and potential attack paths using automated tools and manual testing techniques •Perform manual penetration testing of websites, services, applications, APIs, infrastructure, networks, cloud environments, IoT devices and mobile applications •Coordinate with IT, infrastructure, application and other relevant teams to ensure timely remediation of identified vulnerabilities •Validate completed remediation actions and ensure vulnerabilities are closed in accordance with defined risk and compliance requirements •Prepare technical security assessment reports, risk ratings, management dashboards and practical remediation recommendations •Monitor emerging vulnerabilities, exploits, threats and attack techniques and assess their potential impact on the organization •Continuously improve security-testing methodologies, vulnerability-management processes, offensive-security capabilities and related security controls •Develop scripts, tools and methodologies to improve and automate red-teaming, vulnerability discovery, validation and exploitation activities
Applicants General Eligibility & Requirements
4+ years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Information Security, Computer Science, Information Technology
•Minimum 4 years of relevant hands-on experience in information security, offensive security or a related field •Hands-on experience in red teaming, penetration testing, vulnerability assessments and other offensive security activities •Experience managing or contributing to an enterprise-level Vulnerability Assessment or Vulnerability Management Program •Experience in risk-based vulnerability prioritization, remediation tracking, validation and management reporting •Experience conducting security testing of web applications and services, APIs, networks and infrastructure, cloud environments, mobile applications and IoT devices •Experience preparing security assessment reports and presenting findings to technical and management stakeholders Preferred: •Experience in Oil and Gas, Banking and Financial Services, Telecommunications, Technology and IT Services, Critical Infrastructure or other highly regulated or security-sensitive industries
Penetration Testing, Red Teaming, Vulnerability Assessment, Vulnerability Management, Burp Suite, Nmap, Nessus/ Qualys, Metasploit, OWASP Top 10, API Security, Cloud Security Testing, Active Directory Security, Network Security, Python, Bash
•Relevant certification such as OSCP, CEH or equivalent required
•Contractual position
Pak-Arab Refinery Limited (PARCO)