Qureos Mentor

United Sol (Pvt.) Ltd

Perform authorized red-team operations focused on network-level exploitation and lateral-movement simulations to test detection and response capabilities.Responsibilities<ul><li>Plan and execute network exploitation engagements within approved ROE.</li><li>Simulate realistic adversary techniques (initial access escalation, lateral movement, persistence) to test SOC and IR readiness.</li><li>Document findings, TTPs used, gaps observed, and remediation steps.</li><li>Collaborate with blue teams to run tabletop and post-ops improvement sessions.</li></ul>Required<ul><li>4+ years in red-team, penetration testing, or advanced network security roles.</li><li>Deep knowledge of Windows domain environments, network protocols, and common exploitation techniques.</li><li>Ability to write clear technical narratives and reproduce attack chains.</li><li>Strong operational security and ethics.</li></ul>Desired<ul><li>Certifications like OSCP, eJPT, or relevant red-team training.</li><li>Experience with C2 frameworks and detection evasion techniques (defensive context only).</li></ul>LegalAll activity is performed under strict authorization, with documented scopes and client consent.Job Type: Full-timeWork Location: In person

Red Team - Network Exploitation Specialist

Conduct authorized security assessments against web, cloud, and infrastructure targets to identify vulnerabilities, verify exploitability, and deliver actionable remediation guidance.Responsibilities<ul><li>Plan and execute agreed penetration tests (web apps, APIs, cloud, networks) under rules of engagement.</li><li>Produce clear technical reports with risk rating, reproduction steps, and remediation recommendations.</li><li>Work with engineering teams to validate fixes and re-test.</li><li>Keep tools, techniques, and test methodology up to date; contribute to internal playbooks.</li></ul>Required<ul><li>3+ years in offensive security/penetration testing or red-team engagements.</li><li>Strong web app, network, and host testing experience; familiarity with common tools and manual testing techniques.</li><li>Experience producing clear technical and executive reports.</li><li>Bachelor&rsquo;s in CS/IT or equivalent experience.</li></ul>Desired<ul><li>OSCP, OSWE, CREST, eJPT or similar certification.</li><li>Experience with cloud (AWS/Azure/GCP) security testing.</li></ul>ComplianceAll work is strictly authorized and performed under approved scopes and legal agreements.Job Type: Full-timeWork Location: In person

Penetration Tester (Offensive Security)

Research, analyze, and reverse-engineer malicious code to produce detections, mitigation guidance, and threat intelligence for enterprise protection.Responsibilities<ul><li>Analyze samples (static/dynamic) to determine behavior, persistence, and indicators of compromise.</li><li>Develop signatures, YARA rules, and detection content for endpoint and network tools.</li><li>Produce concise technical reports and IOC packages for incident response teams.</li><li>Feed findings into threat intelligence and help improve defensive controls.</li></ul>Required<ul><li>3+ years in malware analysis, incident response, or threat research.</li><li>Comfortable with reverse-engineering tools and analysis workflows (no requirement to author malicious tools).</li><li>Strong Windows and/or Linux internals knowledge and scripting ability (Python, PowerShell, etc.).</li><li>Degree in relevant field or equivalent experience.</li></ul>Desired<ul><li>Experience with sandboxing platforms, YARA, and public threat intelligence platforms.</li><li>Certification such as GIAC Reverse Engineering Malware (GREM) is a plus.</li></ul>EthicsRole is strictly defensively focused; all analysis conducted for protection, detection, and lawful response.Job Type: Full-timeWork Location: In person

Malware Research & Defensive Analyst (Reverse Engineering)

Design and execute authorized social-engineering assessments to evaluate human and process resilience, then lead awareness and remediation initiatives.Responsibilities<ul><li>Plan and run phishing, vishing, in-person (where permitted), and other human-focused assessments under clear authorization.</li><li>Create realistic campaign content, landing pages, and measurement metrics; track user interaction and reporting rates.</li><li>Deliver clear briefings, training recommendations, and awareness materials to reduce human risk.</li><li>Work with legal and HR to ensure campaigns comply with policy and privacy laws.</li></ul>Required<ul><li>3+ years performing social-engineering assessments or related security awareness roles.</li><li>Strong copywriting and communications skills; ability to craft plausible scenarios.</li><li>Experience with campaign platforms and post-campaign reporting.</li><li>Comfort coordinating with legal/HR and handling sensitive results.</li></ul>Desired<ul><li>Certifications in security awareness or phishing platforms</li><li>Background in psychology/communications is a plus.</li></ul>Ethics &amp; PrivacyCampaigns require explicit approval, privacy safeguards, and respectful handling of results; remediation is prioritized over punitive action.Job Type: Full-timeWork Location: In person

Human Security Testing & Social Engineering Specialist

Join United Sol (Pvt.) Ltd and explore 4   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

United Sol (Pvt.) Ltd

ABOUT_COMPANY

Red Team - Network Exploitation Specialist

Penetration Tester (Offensive Security)

Malware Research & Defensive Analyst (Reverse Engineering)

Human Security Testing & Social Engineering Specialist