Contract IT SOC Analyst – Offensive Security

PARCO; Karachi Division; On-site; PKR 2,000,000 - 3,600,000; Full time

Job summary

Pak-Arab Refinery Limited (PARCO) is seeking an IT SOC Analyst on a contractual basis to lead offensive security assessments, red team exercises, and vulnerability management across applications, networks, cloud, and IoT. You will drive risk-based remediation, develop reports, and present findings to technical and management stakeholders.

The role requires hands-on testing, risk prioritization, and continuous improvement of security controls.

Qualifications

• Bachelor’s degree in information security, CS, IT, or related field.
• Strong analytical and problem-solving capabilities.
• Ability to collaborate with cross-functional teams.
• Strong technical report-writing and communication skills.
• Ability to present security findings to technical and management stakeholders.
• Strong stakeholder management and coordination capabilities.
• Certifications such as OSCP, CEH, or equivalent.

Responsibilities

• Conduct red-team exercises, penetration testing, vulnerability assessments, and security testing across applications, APIs, networks, infrastructure, cloud, and other tech environments.
• Manage end-to-end Vulnerability Assessment and Vulnerability Management Program including planning, scanning, assessment, remediation, validation, and closure.
• Identify, validate, and assess vulnerabilities using automated tools and manual testing techniques.
• Perform manual penetration testing of websites, services, apps, APIs, infrastructure, and mobile apps to discover vulnerabilities.
• Coordinate with IT and other teams to ensure timely remediation of identified vulnerabilities.
• Validate remediation actions and ensure closures per risk and compliance requirements.
• Prepare technical security assessment reports, risk ratings, dashboards, and remediation recommendations.
• Monitor emerging vulnerabilities and attack techniques and assess their impact.

Skills

Red teaming

Penetration testing

Vulnerability assessment

Security testing

Report writing

Stakeholder communication

Education

Bachelor’s degree

Tools

Burp Suite

Nmap

Nessus/Qualys

Metasploit

Job description

Pak-Arab Refinery Limited (PARCO) is seeking an IT SOC Analyst on a contractual basis to lead offensive security assessments, red team exercises, and vulnerability management across applications, networks, cloud, and IoT. You will drive risk-based remediation, develop reports, and present findings to technical and management stakeholders.

The role requires hands-on testing, risk prioritization, and continuous improvement of security controls.