Senior Offensive Security Engineer - AI/LLM & Cloud

Plutus21 Partners; Karachi Division; In loco; PKR 1.800.000 - 3.600.000; Tempo pieno

Descrizione del lavoro

Plutus21 Partners is seeking a seasoned Security Engineer to own offensive security across client engagements, including network, web, and AI/LLM testing. You will build tooling, write policies, and help scale a security pod while delivering practical remediation and risk-based guidance.

Responsibilities span red-team exercises aligned with MITRE ATT&CK, PHP-heavy web testing, cloud security, and governance for SOC 2, ISO 27001, and NIST CSF.

Competenze

• At least five years hands-on in cybersecurity with offensive depth as core work.
• Proven web application testing track record, including PHP-heavy stacks (Laravel/WordPress).
• Strong knowledge of OWASP Top 10 and modern web/API attack classes with working exploits.
• Familiarity with AI/LLM attack surfaces (prompt injection, jailbreaks, data exfiltration).
• Good command of at least one major cloud platform (AWS preferred) and security services.
• Experience with incident response, threat detection, log analysis, SIEM/EDR.
• Ability to communicate risk clearly to non-technical stakeholders; report writing skills.

Mansioni

• Run full-scope penetration tests across networks, apps, APIs, and cloud environments.
• Conduct red-team and adversary simulations mapped to MITRE ATT&CK and craft realistic attack paths.
• Perform social-engineering and phishing assessments when authorized.
• Deliver findings with PoC, business impact, CVSS rating, and actionable remediation.
• Embed secure development practices: threat modeling, secure code review, and SAST/DAST in CI/CD.
• Design and maintain security controls across cloud, infrastructure, endpoints, and identity.
• Monitor threats, triage alerts, and lead incident response and post-incident reviews.
• Drive governance, risk, and compliance for SOC 2, ISO 27001, and NIST CSF with evidence mapping.
• Define structure, roadmap, and hiring plan for a growing security pod.
• Report risks and metrics to leadership and clients; deliver security awareness training.

Strumenti

Burp Suite

Descrizione del lavoro

Plutus21 Partners is seeking a seasoned Security Engineer to own offensive security across client engagements, including network, web, and AI/LLM testing. You will build tooling, write policies, and help scale a security pod while delivering practical remediation and risk-based guidance.

Responsibilities span red-team exercises aligned with MITRE ATT&CK, PHP-heavy web testing, cloud security, and governance for SOC 2, ISO 27001, and NIST CSF.