VAPT Analyst (Vulnerability Assessment & Penetration Testing)

About the role

MCB Islamic Bank is seeking a motivated VAPT Analyst to strengthen the security of its critical banking systems. You will work within the Information Security team, applying ethical hacking techniques to identify and remediate vulnerabilities across web, mobile, network and infrastructure assets.

Key responsibilities

• Conduct vulnerability assessments and penetration tests on a variety of assets, including web applications, mobile apps, networks and cloud infrastructure.
• Produce detailed technical reports with clear remediation recommendations and present findings to IT and development teams.
• Collaborate with developers and engineers to validate fixes and ensure complete closure of identified issues.
• Research emerging attack techniques, tools and exploits to keep testing methodologies up‑to‑date.
• Support compliance audits (PCI DSS, NIST, ISO 27001) and participate in red‑team exercises.

Required profile

• 1–3 years of hands‑on experience in vulnerability assessment, penetration testing or related information‑security roles.
• Familiarity with industry frameworks such as OWASP Top 10, MITRE ATT&CK and CVSS.
• Basic scripting ability (Python, Bash or PowerShell) is a plus.
• Relevant certifications (e.g., OSCP, CEH, eJPT, eWPT) are advantageous.

Required skills

• Burp Suite
• Nessus
• Metasploit
• Nmap
• Nexpose
• OWASP Top 10 knowledge
• MITRE ATT&CK framework
• CVSS scoring
• Python (basic)
• Bash or PowerShell (basic)

What we offer

• Opportunity to work on high‑impact security projects within a leading financial institution.
• Supportive culture that encourages professional growth, innovation and work‑life balance.
• Collaborative environment with regular team lunches and knowledge‑sharing sessions.