IT SOC Analyst — Red Team & Vulnerability Mgmt (Contract)

PARCO - Pak-Arab Refinery Limited; Karachi Division; On-site; PKR 2,000,000 - 3,000,000; Full time

Job summary

PARCO – Pak-Arab Refinery Limited is seeking an IT SOC Analyst (Contractual) to lead offensive security activities across applications, networks, and cloud environments. The role focuses on managing the Vulnerability Assessment and Vulnerability Management Program, risk-based prioritization, remediation tracking, and reporting.

The ideal candidate has a minimum 4 years of hands-on information security experience, strong reporting skills, and relevant certifications such as OSCP or CEH.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or related field.

Responsibilities

• Conduct red-team exercises, penetration testing, vulnerability assessments, and security testing across applications, APIs, networks, infrastructure, cloud, and other technology environments.
• Manage the end-to-end Vulnerability Assessment and Vulnerability Management Program, including planning, scanning, validation, remediation tracking and retesting.
• Identify, validate, and assess vulnerabilities and potential attack paths using automated tools and manual testing.
• Perform manual penetration testing of websites, services, applications, APIs, infrastructure, networks, cloud environments, IoT devices, and mobile applications.
• Coordinate with IT and other teams to ensure timely remediation of identified vulnerabilities.
• Validate remediation actions and ensure vulnerabilities are closed per risk and compliance requirements.
• Prepare technical security assessment reports, risk ratings, dashboards, and practical remediation recommendations.
• Monitor emerging vulnerabilities, exploits, threats, and attack techniques and assess their impact on the organization.
• Continuously improve security-testing methodologies, vulnerability-management processes and security controls.
• Develop scripts, tools, and methodologies to improve red-teaming, vulnerability discovery, validation, and exploitation.

Skills

Analytical skills

Report writing

Communication skills

Stakeholder management

Cross-functional teamwork

Education

Bachelor’s degree in Information Security / IT / Computer Science

Tools

Burp Suite

Nmap

Nessus

Qualys

Metasploit

Job description

PARCO – Pak-Arab Refinery Limited is seeking an IT SOC Analyst (Contractual) to lead offensive security activities across applications, networks, and cloud environments. The role focuses on managing the Vulnerability Assessment and Vulnerability Management Program, risk-based prioritization, remediation tracking, and reporting.

The ideal candidate has a minimum 4 years of hands-on information security experience, strong reporting skills, and relevant certifications such as OSCP or CEH.