SZABIST University Islamabad is looking for a motivated and dynamic individual for the position of "Cyber Security Analyst/ Penetration Tester" Duties & Responsibilities: Perform penetration testing and realistic security exercises to simulate real attackers, to test and improve our detection and response capabilities, and to identify weakness in our infrastructure and products. Collaborate closely with product teams to design defense-in-depth controls that limit attackers ability and improve our security postures. Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products. Bring insight into all aspects of modern security issues to our products and rapidly develop prototypes for mitigations. Ability to build custom penetration testing tools and contribute to open-source technologies. Periodical reports on testing and patching, attacks, details, and actions. Any other tasks assigned by the Supervisor/ Higher Management Skill-set Requirements: The job requires proficiency in the following tools & technologies; Experience with performing white and grey box penetration testing and system exploitation against desktops, servers, applications, operating systems, and physical security systems. Experience with analyzing vulnerabilities and delivering clear and coherent written reporting, identifying network risks, and providing mitigation recommendations Experience with conducting penetration and malicious user testing in environments, including Web Services (WS), Azure, and on-premise systems Excellent in software security issues and remediation techniques (OWASP Top 10, SANS 25, Mitre ATT&CK, etc.) Excellent knowledge of Windows/AD/Linux systems administration and vulnerabilities Solid knowledge and understanding of systems development life cycle (SDLC), CI/CD pipelines and Agile methodologies Development experience using Python, PowerShell, C, or C++