Security Analyst: Web, API & Cloud Penetration Expert

ibex; Lahore; On-site; PKR 2,000,000 - 3,000,000; Full time

Job summary

IBEX is seeking an information security specialist with strong web application assessment and penetration testing concepts. The role coordinates and helps implementing the IT Security Roadmap and security processes to protect IBEX Global assets.

Responsibilities include conducting full-scale security assessments of web, APIs, AI/LLM, and mobile apps; participating in red team exercises; coordinating with third parties; and enabling secure coding practices.

Qualifications

• Bachelors Degree in IT/CS/Software Eng./Telecom.
• Experience in penetration testing and vulnerability assessment.
• Proficiency with Burp Pro and other pentest tools.
• Experience with source code analysis tools and OWASP.
• OSCP/OSWP/CEH (Practical) certification is required.

Responsibilities

• Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
• Participate in red team and automated pentest exercises internally or by third party.
• Active coordination for any third party penetration testing exercises.
• Using open source tools, scripts and techniques to enumerate and map publicly exposed assets and vulnerability surface.
• Coordination with IT infrastructure & development teams for remediation.
• Reviewing application design and flow to identify business logic flaws.
• Using various tools for vulnerability scanning of IT assets and dynamic/static application assessments.
• Support development teams for secure coding practices.
• Perform Cloud security review and prepare reports with gaps and remediation guidelines.
• Fair understanding with prompt injection, adversarial input, model inversion, hallucination attacks for LLM testing.
• Familiarly with Gen-AI applications security assessment.

Skills

Penetration testing

Vulnerability Assessment

Burp Pro

Source Code Analysis

OWASP

Presentation skills

OSCP/OSWP/CEH

Education

Bachelor's Degree in IT/CS/Software Eng./Telecom

Tools

Burp Pro

Job description

IBEX is seeking an information security specialist with strong web application assessment and penetration testing concepts. The role coordinates and helps implementing the IT Security Roadmap and security processes to protect IBEX Global assets.

Responsibilities include conducting full-scale security assessments of web, APIs, AI/LLM, and mobile apps; participating in red team exercises; coordinating with third parties; and enabling secure coding practices.