Senior Offensive Security Engineer

Plutus21; Karachi Division; In loco; PKR 2.500.000 - 3.800.000; Tempo pieno

Descrizione del lavoro

Plutus21 is seeking a senior security engineer to own offensive security across engagements, including networks, applications, and AI/LLM systems. You will build tooling, write security policy foundations, and help scale a security pod for client delivery.

You will perform red-team exercises mapped to MITRE ATT&CK, conduct web and API testing, and drive governance and incident response capabilities. Excellent English communication is essential.

Competenze

• Five years or more hands-on cybersecurity with offensive focus.
• Proven web application testing track record including PHP stacks (Laravel/WordPress).
• Deep knowledge of OWASP Top 10 and modern attack classes.
• Experience with AI/LLM attack surface testing and guardrails.
• Strong cloud security knowledge, preferably AWS, and related native services.
• Practical incident response, threat detection, and log analysis with SIEM/EDR.
• Solid networking, OS, identity management, and encryption fundamentals.
• Scripting/automation in Python, Bash, or PowerShell.
• Experience with at least one compliance framework: SOC 2, ISO 27001, or NIST CSF.

Mansioni

• Lead offensive security engagements across networks, apps, APIs, and clouds.
• Perform red-team/adversary simulations aligned to MITRE ATT&CK.
• Conduct social-engineering and phishing assessments where authorized.
• Deliver actionable findings with PoC, business impact, CVSS, and remediation.
• Test and report OWASP Top 10 flaws in PHP-heavy stacks.
• Assess APIs (REST/GraphQL) and SPAs for current attack techniques.
• Design and implement security controls, policies, and audits.
• Manage security tooling baseline (Vulnerability scanning, EDR, SIEM, CSPM).
• Drive SOC 2/ISO 27001/NIST CSF readiness and vendor risk assessments.
• Define roadmap, hiring plan for security pod, and client-delivery processes.

Conoscenze

Offensive security depth

Web app testing

OWASP Top 10

AI/LLM attack surface

Cloud security (AWS)

Incident response & SIEM/EDR

Networking & OS fundamentals

Scripting (Python/Bash/PowerShell)

Compliance frameworks (SOC 2, ISO 2701

Strumenti

Burp Suite Professional

SIEM

EDR tooling

Descrizione del lavoro

Plutus21 is seeking a senior security engineer to own offensive security across engagements, including networks, applications, and AI/LLM systems. You will build tooling, write security policy foundations, and help scale a security pod for client delivery.

You will perform red-team exercises mapped to MITRE ATT&CK, conduct web and API testing, and drive governance and incident response capabilities. Excellent English communication is essential.