Manager Cybersecurity (Threat Hunting & Incident Responder)

Raqami Islamic Digital Bank; Karachi Division; On-site; PKR 1,800,000 - 3,400,000; Full time

Job summary

Raqami Islamic Digital Bank is seeking a Manager of Cybersecurity (Threat Hunting & Incident Responder) to proactively hunt threats, simulate adversary activity, and assess vulnerabilities across on-premises and cloud environments in line with SBP, ISO/IEC 27001, PCI DSS, and internal security policies.

The role requires 3–5 years of experience in threat hunting, red teaming, or security assessments, with a strong background in security testing tools and methodologies.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• 3-5 years of relevant experience in threat hunting, red teaming, or security assessments.

Responsibilities

• Conduct proactive threat hunting across endpoints, networks, applications, and cloud environments to identify suspicious activities and potential threats.
• Perform authorized red team exercises and adversary simulations to evaluate the effectiveness of security controls and incident response capabilities.
• Conduct vulnerability assessments and penetration testing of web applications, mobile banking applications, APIs, networks, infrastructure, and cloud environments.
• Identify, validate, and assess security vulnerabilities using industry-standard tools and methodologies.
• Perform attack-path analysis to identify potential unauthorized access, privilege escalation, lateral movement, and security control gaps.
• Assess external attack surfaces, exposed assets, misconfigurations, and potential phishing or brand impersonation threats.
• Analyze security logs, threat intelligence, and indicators of compromise to identify potential attacks and improve detection capabilities.
• Prepare technical assessment reports with risk ratings, evidence, business impact, and remediation recommendations.
• Coordinate with relevant teams for vulnerability remediation and perform retesting to validate closure of findings.
• Support compliance with applicable SBP requirements, ISO/IEC 27001, PCI DSS, and internal Information Security policies.
• Ensure all security testing is performed under approved scope, authorization, and rules of engagement.

Skills

Threat hunting

Red teaming

Incident response

Vulnerability assessment

Cloud security

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related

Tools

Burp Suite

Nmap

Nessus

InsightVM

Acunetix

OWASP

MITRE ATT&CK

CVSS

SIEM/EDR

Job description

Job Title:Manager Cybersecurity (Threat Hunting & Incident Responder)

Department: Information Security

Job Overview

To proactively hunt for threats, simulate adversary activity, and assess vulnerabilities across Raqami’s applications, networks, infrastructure, and cloud environments, ensuring that security weaknesses and attack paths are identified, reported, remediated, and retested, in alignment with SBP requirements, ISO/IEC 27001, PCI DSS, and internal Information Security policies.

Key Responsibilities

• Conduct proactive threat hunting across endpoints, networks, applications, and cloud environments to identify suspicious activities and potential threats.
• Perform authorized red team exercises and adversary simulations to evaluate the effectiveness of security controls and incident response capabilities.
• Conduct vulnerability assessments and penetration testing of web applications, mobile banking applications, APIs, networks, infrastructure, and cloud environments.
• Identify, validate, and assess security vulnerabilities using industry-standard tools and methodologies.
• Perform attack-path analysis to identify potential unauthorized access, privilege escalation, lateral movement, and security control gaps.
• Assess external attack surfaces, exposed assets, misconfigurations, and potential phishing or brand impersonation threats.
• Analyze security logs, threat intelligence, and indicators of compromise to identify potential attacks and improve detection capabilities.
• Prepare technical assessment reports with risk ratings, evidence, business impact, and remediation recommendations.
• Coordinate with relevant teams for vulnerability remediation and perform retesting to validate closure of findings.
• Support compliance with applicable SBP requirements, ISO/IEC 27001, PCI DSS, and internal Information Security policies.
• Ensure all security testing is performed under approved scope, authorization, and rules of engagement.

Experience & Qualification Required

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• 3-5 years of relevant experience in threat hunting, red teaming, or security assessments. Banking or regulated financial-sector experience is an advantage.

Skills & Competencies

• Hands-on experience with tools such as Burp Suite, Nmap, Nessus, InsightVM, Acunetix, or equivalent.
• Knowledge of OWASP, MITRE ATT&CK, CVSS, network security, application security, and common attack techniques.
• Experience in SIEM/EDR investigation, vulnerability validation, and remediation retesting.
• Relevant certifications such as CEH, CompTIA certifications, or equivalent are preferred.
• Banking or regulated financial-sector experience is an advantage

Raqami Bank is an equal opportunity employer. We welcome applications from all qualified individuals, including Persons with Disabilities (PWDs), and are committed to fostering an inclusive workplace where everyone has the opportunity to succeed.

Last date to apply: November 16, 2026.