Opportunity Information
1
Bank/ Digital Bank/ Microfinance Bank/ Financial Institution
Managerial/ Experienced Professional
On Site
Karachi
The Role
To proactively hunt for threats, simulate adversary activity, and assess vulnerabilities across Raqami’s applications, networks, infrastructure, and cloud environments, ensuring that security weaknesses and attack paths are identified, reported, remediated, and retested, in alignment with SBP requirements, ISO/ IEC 27001, PCI DSS, and internal Information Security policies.
•Conduct proactive threat hunting across endpoints, networks, applications, and cloud environments to identify suspicious activities and potential threats •Perform authorized red team exercises and adversary simulations to evaluate the effectiveness of security controls and incident response capabilities •Conduct vulnerability assessments and penetration testing of web applications, mobile banking applications, APIs, networks, infrastructure, and cloud environments •Identify, validate, and assess security vulnerabilities using industry-standard tools and methodologies •Perform attack-path analysis to identify potential unauthorized access, privilege escalation, lateral movement, and security control gaps •Assess external attack surfaces, exposed assets, misconfigurations, and potential phishing or brand impersonation threats •Analyze security logs, threat intelligence, and indicators of compromise to identify potential attacks and improve detection capabilities •Prepare technical assessment reports with risk ratings, evidence, business impact, and remediation recommendations •Coordinate with relevant teams for vulnerability remediation and perform retesting to validate closure of findings •Support compliance with applicable SBP requirements, ISO/ IEC 27001, PCI DSS, and internal Information Security policies •Ensure all security testing is performed under approved scope, authorization, and rules of engagement
Applicants General Eligibility & Requirements
3- 5 years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Computer Science, Cyber Security, Information Security
3-5 years of relevant experience in threat hunting, red teaming, or security assessments. Banking or regulated financial-sector experience is an advantage
Burp Suite, Nmap, Nessus, InsightVM, Acunetix, OWASP, MITRE ATT&CK, CVSS, SIEM/ EDR investigation, Vulnerability validation
CEH, CompTIA or equivalent certifications preferred
Raqami Islamic Digital Bank