Senior Cyber Defense & Offensive Security Engineer

Nexsoll; Bahawalpur Division; On-site; PKR 3,000,000 - 6,000,000; Full time

Benefits offered by this job

Competitive salary

Leadership team focused on security

Job summary

Nexsoll, a privately held digital innovation firm, seeks an elite security expert who thinks like an attacker and builds defenses like an engineer. You will identify critical vulnerabilities, simulate real attacks and implement layered protections across apps, APIs, and cloud infrastructure.

You will harden cloud environments, containers, CI/CD, and IAM, while leading incident response and mentoring the engineering team to bake security into the lifecycle.

Qualifications

• 7+ years of hands-on offensive and/or defensive security experience.
• Proven record of finding critical vulnerabilities (CVEs, bug bounty entries, or real pentest results).
• Deep knowledge of the OWASP Top 10, API security, auth flaws, injections and business logic bugs.
• Experience defending cloud environments (AWS/Azure/GCP) and container/Kubernetes hardening.
• Ability to code/script (Python, Go, Bash) to automate defenses.
• Clear communication to developers and executives about risk.
• Rankings on HackerOne/Bugcrowd/Intigriti or CTF wins; published CVEs or talks.

Responsibilities

• Hunt for critical bugs; run deep penetration tests across apps, APIs, and cloud infra.
• Run red team exercises simulating real attack chains from initial access to exfiltration.
• Design defense-in-depth: WAF, rate limiting, bot mitigation, DDoS protection and zero-trust.
• Harden cloud, containers, CI/CD, secrets management and IAM.
• Set up monitoring, SIEM, alerts; write incident response playbooks.
• Secure the code with threat modeling, SAST/DAST, dependency scanning and secure reviews.
• Lead incident response; coordinate containment, investigation and remediation.
• Raise the bar by training teams and embedding security into the culture.

Tools

Burp Suite

Metasploit

Nmap

Ghidra/IDA

Cobalt Strike

Job description

Nexsoll, a privately held digital innovation firm, seeks an elite security expert who thinks like an attacker and builds defenses like an engineer. You will identify critical vulnerabilities, simulate real attacks and implement layered protections across apps, APIs, and cloud infrastructure.

You will harden cloud environments, containers, CI/CD, and IAM, while leading incident response and mentoring the engineering team to bake security into the lifecycle.