Senior Offensive Security Engineer - Red Team, Cloud & Compliance

Plutus21 Capital, L.L.C.; Karachi Division; Presencial; PKR 2.200.000 - 4.200.000; Tempo integral

Resumo da vaga

Plutus21 Capital, L.L.C. seeks a senior security engineer to own offensive and defensive security across client engagements. You will perform pen tests, red-team exercises, and build controls, policies, and audit evidence.

You will work across cloud, web apps (PHP stacks), AI/LLM risk, and CI/CD security, reporting findings with actionable remediations and leading security governance initiatives. This role often operates solo while shaping the security pod.

Qualificações

• At least five years hands-on cybersecurity with offensive depth (pentesting/red-team).
• Proven web app testing track record on PHP stacks (Laravel/WordPress).
• Strong OWASP Top 10 and web/API attack understanding with working exploits.
• Familiar with AI/LLM security or able to upskill quickly.
• Experience with at least one cloud platform (AWS preferred).
• Practical incident response, threat detection, and log analysis.

Responsabilidades

• Lead offensive security engagements across networks, apps, APIs and cloud.
• Map red-team findings to MITRE ATT&CK and deliver remediation paths.
• Conduct phishing assessments when engagement authorizes them.
• Deliver findings with PoC, business impact, CVSS, and remediation.
• Embed secure DevOps: threat modeling, SAST/DAST, deps scanning in CI/CD.
• Design and maintain cloud security controls and IAM least privilege.
• Monitor security operations, triage threats, and lead IR efforts.
• Drive governance for SOC 2, ISO 27001, and NIST CSF readiness.
• Help build the security pod: hiring, tooling, and process improvements.

Conhecimentos

Penetration testing

Red-team operations

Vulnerability assessment

Threat modeling

OWASP Top 10

PHP security testing

Laravel/WordPress

Web API security

Cloud security

AWS

Python scripting

Bash scripting

PowerShell scripting

SIEM/EDR

MITRE ATT&CK

Security governance

Ferramentas

Burp Suite

OWASP ZAP

SIEM tools

EDR tools

CSPM

CI/CD tooling

Descrição da vaga

Plutus21 Capital, L.L.C. seeks a senior security engineer to own offensive and defensive security across client engagements. You will perform pen tests, red-team exercises, and build controls, policies, and audit evidence.

You will work across cloud, web apps (PHP stacks), AI/LLM risk, and CI/CD security, reporting findings with actionable remediations and leading security governance initiatives. This role often operates solo while shaping the security pod.