Senior Security Engineer: Red Team, Cloud & Compliance

Plutus21; Karachi Division; In loco; PKR 1.800.000 - 3.600.000; Tempo pieno

Descrizione del lavoro

Plutus21 is seeking a security engineer to own offensive security and build the security pod from the ground up. You will run pen tests, simulate adversaries, test PHP-heavy apps, and shape governance, policies, and audits across client engagements.

You will design tooling, develop secure coding practices in CI/CD, and help mature security posture across cloud, identity, and infrastructure while communicating risk to leadership and clients.

Competenze

• Hands-on offensive security experience including penetration testing.
• Experience with web application security testing, including PHP stacks (Laravel, WordPress or custom code).
• Familiarity with MITRE ATT&CK and red-team methodologies.

Mansioni

• Run full-scope penetration tests against networks, applications, APIs, and cloud environments.
• Perform red-team and adversary-simulation exercises mapped to MITRE ATT&CK.
• Conduct social-engineering and phishing assessments where authorized.
• Deliver findings with proof-of-concept, business impact, CVSS rating, and remediation.

Conoscenze

Offensive security

Web application testing

PHP security testing

OWASP Top 10

Cloud security

SIEM/EDR

Incident response

Python scripting

English communication

SOC 2 / ISO 27001 / NIST CSF

Strumenti

Burp Suite

SIEM

EDR

CSPM

Descrizione del lavoro

Plutus21 is seeking a security engineer to own offensive security and build the security pod from the ground up. You will run pen tests, simulate adversaries, test PHP-heavy apps, and shape governance, policies, and audits across client engagements.

You will design tooling, develop secure coding practices in CI/CD, and help mature security posture across cloud, identity, and infrastructure while communicating risk to leadership and clients.