Senior Security & Vulnerability Engineer – Cloud & Automation

NextGENi - A DotZero Company; Karachi Division; Hybrid; PKR 3,000,000 - 5,200,000; Full time

Job summary

NextGENi is seeking a hands-on Security & Vulnerability Engineer to own the security assessment function across customer environments. Reporting to the CTO, you will identify, assess, and communicate security risks across applications, infrastructure, cloud environments, and networks.

You will manage the vulnerability lifecycle from discovery to remediation and verification. The ideal candidate thrives on offensive security, automation, and improving security posture in customer deployments,

Qualifications

• 5+ years hands-on cybersecurity experience.
• Experience in vulnerability assessment, pen testing, and secure SDLC.
• Familiar with OWASP Top 10 and modern security testing.
• Experience with automation and scripting.
• Ability to communicate risk to stakeholders.
• Experience with AI-assisted security tooling.

Responsibilities

• Own end-to-end vulnerability assessment across apps, infra, cloud, and networks.
• Perform hands-on security assessments using automated and manual techniques.
• Communicate findings and remediation recommendations to engineering, customers, and leadership.
• Develop automation to improve efficiency of security assessments.
• Collaborate with Engineering, DevOps, and Cloud teams to validate remediation.
• Enhance methodologies by adopting industry best practices and new tooling.

Skills

Security

Vulnerability assessment

Penetration testing

SAST/DAST

Cloud platforms (AWS/Azure/GCP)

Bash scripting

Linux

Communication skills

AI-assisted tooling

Tools

Network scanners

Container security tools

CI/CD security integration

Terraform

CloudFormation

Job description

NextGENi is seeking a hands-on Security & Vulnerability Engineer to own the security assessment function across customer environments. Reporting to the CTO, you will identify, assess, and communicate security risks across applications, infrastructure, cloud environments, and networks.

You will manage the vulnerability lifecycle from discovery to remediation and verification. The ideal candidate thrives on offensive security, automation, and improving security posture in customer deployments,