VAPT Engineer

VIDIZMO LLC

Karachi Division

On-site

PKR 1,200,000 - 2,000,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health Insurance (OPD/IPD)

Separate Maternity Cover

Leave encashment

Car Support Program

Referral Bonus

EOBI

Bi-Annual Increment

Provident Fund

Career Growth

Bonus (location-based)

Job summary

VIDIZMO LLC in Karachi is seeking a security-minded professional to strengthen our secure software development lifecycle and embed security best practices across development, testing, and deployment. The role covers vulnerability assessments, penetration testing, and AI-output validation, using Nessus, Nmap, Metasploit, Burp Suite, and other industry tools; red team exercises and remediation prioritization are part of the remit.

CEH/OSCP preferred; Claude-based assessment required.

Qualifications

Bachelor’s degree in Computer Science, Information Security, or a related field.
Solid understanding of security vulnerabilities, attack vectors, and exploitation techniques.
Hands-on experience with security testing tools such as Nessus, Nmap, Metasploit, Burp Suite, etc.
Familiarity with OS, networking protocols, and web technologies.
Excellent analytical and problem-solving skills with attention to detail.
Clear communication, both verbal and written, with ability to explain findings.
CEH/OSCP or equivalent preferred.
Proficiency in Claude is mandatory and familiarity with ChatGPT requested.

Responsibilities

Perform in-depth vulnerability assessments and penetration tests on systems, networks, and applications.
Review and validate AI-generated outputs and ensure quality and compliance.
Own final deliverables, regardless of AI assistance.
Critically evaluate AI results to meet requirements.
Stay updated on cybersecurity threats, vulnerabilities, and best practices.
Collaborate with cross-functional teams to prioritize remediation based on severity and impact.
Participate in red team exercises to simulate real-world attacks.
Contribute to security policies, procedures, and guidelines.

Skills

Vulnerability assessment

Penetration testing

AI tool evaluation

Communication

Ownership mindset

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Nessus

Nmap

Metasploit

Burp Suite

Job description

We’re looking for a passionate professional to strengthen our secure software development lifecycle (SDLC) and integrate security best practices into every stage of development. The ideal candidate will have hands‑on experience in DevSecOps, secure coding, and vulnerability management — with VAPT skills being a plus.

VIDIZMO is a USA-based technology company headquartered in Tysons, Virginia, and a Microsoft Solutions Partner in Data & AI, Infrastructure, and Digital & App Innovation. Offering an AI-Powered Intelligence Hub, we empower Fortune 500 companies, large enterprises, governments, and the public sector to securely manage, analyze, and govern their data with complete control and compliance.

Our Multimodal AI Data Intelligence Platform leverages Large Language Models (LLMs) and RAG (Retrieval-Augmented Generation) to deliver powerful capabilities such as auto-tagging, redaction, content summarization, OCR, translation, subtitle creation, object detection and tracking, content search, sentiment and emotion analysis, topic extraction, document classification, and facial attribute detection.

AI Output Verification & Accountability (Required Competency)

The candidate must be capable of effectively using AI tools (e.g., Claude, ChatGPT, Copilot, or similar) to support work outputs such as content, analysis, documentation, or code. However, the candidate must also demonstrate strong judgment and ownership of the final deliverables. AI-generated output must never be treated as final without review. The candidate is expected to validate accuracy, completeness, logic, compliance, and alignment with business requirements, and refine AI-assisted work to meet the expected quality standards. The individual will be held accountable for the final output, regardless of whether AI tools were used during execution.

Responsibilities

Perform in-depth vulnerability assessments and penetration tests on systems, networks, and applications to uncover security weaknesses and potential threats.
Responsibility for reviewing and validating AI-generated outputs.
Ownership of final deliverables, regardless of AI assistance.
Ability to critically evaluate AI results and ensure they meet defined requirements.
Accountability for accuracy, quality, and compliance.
Utilize a variety of industry-standard tools and methodologies, including Nessus, Nmap, Metasploit, Burp Suite, and others, for both automated and manual testing.
Analyze assessment results meticulously, creating detailed reports outlining identified vulnerabilities, associated risks, and recommended remediation strategies.
Collaborate with cross-functional teams to prioritize and address discovered vulnerabilities based on their severity and potential impact on our organization.
Stay updated on the latest security threats, vulnerabilities, and best practices in cybersecurity.
Participate in red team exercises to simulate real-world cyber attacks, evaluating defensive measures and incident response capabilities.
Contribute to the development and improvement of security policies, procedures, and guidelines based on assessment findings and industry standards.
Provide mentorship and support to junior team members, including training on security assessment methodologies and tools.

Requirements

Hold a Bachelor’s degree in Computer Science, Information Security, or a related field.
Possess a solid understanding of common security vulnerabilities, attack vectors, and exploitation techniques.
Have hands‑on experience with security testing tools such as Nessus, Nmap, Metasploit, Burp Suite, etc.
Familiarity with various operating systems, networking protocols, and web technologies is essential.
Showcase exceptional analytical and problem‑solving skills with great attention to detail.
Communicate effectively, both verbally and in writing, with the ability to explain technical findings and recommendations clearly to diverse audiences.
Preferred certifications include CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent.
The ideal candidate demonstrates strong business acumen, translates objectives into impactful solutions, and effectively leverages AI tools for efficiency. Proficiency in Claude (mandatory) and familiarity with tools such as ChatGPT are required. An ownership mindset and the ability to deliver results independently are essential. Successful completion of a Claude-based assessment is required as part of the hiring process.

Benefits