Security & Vulnerability Engineer

Job Details:

1. Role: Security & Vulnerability Engineer
2. Location:  Karachi (Hybrid)
3. Type: Full-Time
4. Experience Range: 5+ Years

About NextGENi:

NextGENi (Next Generation Innovations) is transforming how regional startups build their technology teams. We help ambitious founders build and manage their offshore technology teams at twice the speed and fraction of the cost. We have built tech teams for some of the leading startups in the region including Careem, Dubizzle, and Kavak. Our mission is to create exceptional tech teams while maintaining an unparalleled culture and the highest regard for professional principles.

About the Role:

We are seeking a hands-on Security & Vulnerability Engineer to own the security assessment function across customer environments. Reporting directly to the CTO, you will be responsible for identifying, assessing, and communicating security risks across applications, infrastructure, cloud environments, and networks. This role combines technical execution with ownership of the vulnerability management lifecycle from discovery and risk assessment through remediation tracking and verification. The ideal candidate is passionate about offensive security, automation, and continuously improving the security posture of customer deployments.

Responsibilities:

1. Own the end-to-end vulnerability assessment process across customer applications, infrastructure, cloud environments, and networks.
2. Perform hands-on security assessments using automated and manual techniques, including code reviews, network scanning, and infrastructure analysis.
3. Communicate security findings, risk ratings, and remediation recommendations to engineering teams, customers, and executive stakeholders.
4. Develop scripts and automation to improve the efficiency, consistency, and coverage of security assessments.
5. Collaborate with Engineering, DevOps, and Cloud teams to validate remediation efforts and improve overall security posture.
6. Continuously enhance security assessment methodologies by adopting industry best practices, emerging threats, and modern security tooling.

Key Requirements:

1. 5+ years of hands-on experience in cybersecurity, application security, vulnerability assessment, penetration testing, or a related security engineering role.
2. Strong knowledge of secure software development, OWASP Top 10, common vulnerability types, and modern security testing methodologies.
3. Hands-on experience with automated security tools, including network scanners, SAST, DAST, dependency scanning, and container security tools.
4. Proficiency in Bash scripting and hands-on experience with Linux environments and at least one major cloud platform (AWS, Azure, or GCP).
5. Excellent communication skills with the ability to translate technical findings into clear, actionable recommendations for both technical and business stakeholders.
6. Demonstrated ability to leverage AI-assisted engineering tools to accelerate security analysis, automation, documentation, and vulnerability research.

Nice to Have:

1. Professional security certifications such as Security+, CEH, PNPT, OSCP, CISSP, or equivalent.
2. Experience integrating security testing into CI/CD pipelines and DevSecOps workflows.
3. Experience securing containerized and Kubernetes-based environments.
4. Familiarity with Infrastructure as Code (Terraform, CloudFormation, or similar).
5. Knowledge of security frameworks and standards such as OWASP ASVS, CIS Benchmarks, ISO 27001, SOC 2, or PCI DSS.

Interview Process:

1. Round 1: A technical interview to assess the candidate’s expertise and practical experience.
2. Round 2: A discussion with the PMO/CTO to evaluate strategic thinking and technical alignment.
3. Round 3: An HR interview to assess cultural fit, communication skills, and overall suitability for the role.