IT Security Analyst

ibex; Lahore; On-site; PKR 1,200,000 - 3,000,000; Full time

Job summary

IBEX in Lahore, Pakistan seeks a seasoned IS security professional to conduct comprehensive security assessments and penetration testing of web, APIs, AI/LLM, and mobile apps. You will coordinate and help implement the IT Security Roadmap and security processes to safeguard IBEX Global assets.

You will work with IT infra and development teams to remediate issues, review design flows for business logic flaws, and apply open-source tools to map exposure.

Responsibilities

• Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
• Coordinate and assist implementing IT Security Roadmap and security processes for IBEX Global assets.
• Coordinate with IT infrastructure & development teams for remediation.
• Review application design and flow to identify business logic flaws.
• Use open source tools to enumerate exposed assets and vulnerability surface.
• Support secure coding practices for development teams.

Job description

To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives.

About the Role

This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate & will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.

Responsibilities

• Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
• Participate in red team and automated pentest exercises internally or by third party.
• Active coordination for any third party penetration testing exercises.
• Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
• Coordination with IT infrastructure & development teams for remediation.
• Reviewing application design and flow to identify business logic flaws.
• Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
• Support development teams for secure coding practices.