Deputy Director Offensive Security

Penetration Testing and Cyber Security

Qualification

Minimum 16 years of education in Information Security, Information Technology, Computer Science, Software Engineering, Electrical Engineering, Electronic Engineering, or Cyber Security from an HEC-recognized university. Higher qualifications in relevant disciplines will be preferred. 

Experience

At least 05 years of post-qualification experience in Vulnerability Management, Offensive Security, Red Teaming, and Penetration Testing within large-scale national or international organizations.

Certification Requirements

Candidates must hold at least one valid certification issued by an internationally recognized certification authority:

• OSCP
• LPT
• CPET
• C|EH

Preference will be given to candidates holding OSCP or LPT certification.

Major Responsibilities

1. Lead penetration testing across various environments, including networks, operating systems, web applications, APIs, mobile applications, infrastructure, cloud platforms, and devices.
2. Establish a robust in-house penetration testing and red teaming capability by leading and mentoring a team of penetration testers and application and database security experts.
3. Manage secure software development and testing activities in accordance with industry regulations and frameworks, including OWASP, ISO, NIST, and CIS.
4. Conduct targeted cyber-attacks, including social engineering, phishing, and Advanced Persistent Threats (APTs).
5. Work with IT team members to validate detection and response capabilities and improve incident response procedures.
6. Conduct red team engagements by simulating realistic and sophisticated attack scenarios to rigorously test security defenses.
7. Develop tools and techniques to automate, scale, and enhance adversary emulation capabilities and vulnerability discovery.
8. Develop exploits and Proof-of-Concepts (POCs) to bypass defenses and replicate threat actor tactics, techniques, and procedures (TTPs).
9. Coordinate third-party penetration testing and red team engagements to ensure the delivery of high-quality products and deliverables.
10. Ensure database security, including access control, encryption, monitoring, vulnerability management, and backup and recovery.

Degree Level

• MS/M.Phil (18 years)
• Masters/Bachelors (Hons) (16 years)

Years of Education

• 16 years minimum

Degree Area

• Computer Engineering/Sciences
• Electronics Engineering/Sciences
• Information Technology
• Electrical Engineering
• Software Engineering

Required Certification

• Offensive Security Certified Professional (OSCP)

Important Note

Domicile is required for this position. To obtain a domicile at home through the Government of Punjab's flagship initiative, call 1202 or download the Dastak Doorstep Delivery App now.