Title

Penetration Tester

Apply before

Jan 30, 2026

City

Lahore

Responsibilities

Summary of Job Profile:

The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.

Essential Duties & Responsibilities:

· Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.

· Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.

· Simulate real-world attack scenarios to assess the effectiveness of security controls.

· Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.  

· Communicate findings and recommendations effectively to technical and non-technical audiences.

· Collaborate with development and security teams to validate and verify the implementation of security fixes.

· Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.

· Develop and maintain penetration testing methodologies, tools, and scripts.

· Conduct security assessments and vulnerability assessments in addition to penetration testing.

· Assist in the development and improvement of security policies and procedures based on testing findings.

· Provide guidance and mentorship to junior security team members on penetration testing techniques.

· Participate in security research and contribute to the organization's knowledge base on emerging threats.

· Document all testing activities and findings in a clear and concise manner.

· Adhere to ethical hacking principles and maintain confidentiality of testing results.

Requirements

Knowledge, Skills, Abilities (KSA’s) required to successfully perform the job:

Knowledge:

· In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.

· Strong understanding of network protocols, operating systems, and web application architectures.

· Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).

· Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).

· Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.

· Knowledge of security best practices and hardening techniques.

· Understanding of cryptography and its application in security.

· Awareness of relevant security regulations and compliance standards.

Skills:

· Proficient in conducting penetration testing on various targets (network, web, mobile).

· Excellent technical skills in using penetration testing tools and techniques.

· Ability to write clear and concise technical reports documenting findings and recommendations.

· Ability to work independently and as part of a team.

· Strong attention to detail and meticulous approach to testing.

· Proficient in scripting languages for automation and tool development.

Abilities:

• Ability to think like an attacker to identify potential weaknesses.
• Ability to analyze complex systems and identify security flaws.
• Ability to effectively utilize penetration testing tools and techniques.
• Ability to clearly articulate technical findings and recommendations in written and verbal reports.
• Ability to work under pressure and manage time effectively during testing engagements.
• Ability to maintain ethical standards and confidentiality.
• Ability to continuously learn and adapt to the evolving threat landscape.

Education, Experience, Licensure, Certification required for the position: 

· Bachelor's degree in Computer Science, Information Security, or a related field.

· 5-6 years of experience in penetration testing or a closely related security role.

· Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable

Competencies required to successfully perform the job:
Technical Competencies	Behavioral/General Competencies
1. Network, web, and mobile app penetration testing. 2. Report Writing & Documentation 3. Use of Penetration Testing Tools (Specify Key Tools) 4. Security Assessment Methodologies 5. Scripting (Python, Bash, etc.)	1. Analytical Thinking 2. Problem-Solving 3. Attention to Detail 4. Communication (Written & Verbal)

Benefits

• Excellent Salary
• Fuel Allowance
• Internet Allowance
• Medical Insurance
• Annual Leaves
• Provident Fund
• EOBI
• Annual Bonus