Penetration Tester

Posted on Mar 06, 2026

Title

Penetration Tester

Apply before

Mar 31, 2026

City

Islamabad

Responsibilities

Summary of Job Profile:

The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.

Essential Duties & Responsibilities

• Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
• Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
• Simulate real-world attack scenarios to assess the effectiveness of security controls.
• Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
• Communicate findings and recommendations effectively to technical and non-technical audiences.
• Collaborate with development and security teams to validate and verify the implementation of security fixes.
• Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
• Develop and maintain penetration testing methodologies, tools, and scripts.
• Conduct security assessments and vulnerability assessments in addition to penetration testing.
• Assist in the development and improvement of security policies and procedures based on testing findings.
• Provide guidance and mentorship to junior security team members on penetration testing techniques.
• Participate in security research and contribute to the organization's knowledge base on emerging threats.
• Document all testing activities and findings in a clear and concise manner.
• Adhere to ethical hacking principles and maintain confidentiality of testing results.
  
  

Requirements

Knowledge, Skills, Abilities (KSA’s) required to successfully perform the job:

Knowledge

• In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
• Strong understanding of network protocols, operating systems, and web application architectures.
• Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
• Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
• Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
• Knowledge of security best practices and hardening techniques.
• Understanding of cryptography and its application in security.
• Awareness of relevant security regulations and compliance standards.
  
  

Skills

• Proficient in conducting penetration testing on various targets (network, web, mobile).
• Excellent technical skills in using penetration testing tools and techniques.
• Ability to write clear and concise technical reports documenting findings and recommendations.
• Ability to work independently and as part of a team.
• Strong attention to detail and meticulous approach to testing.
• Proficient in scripting languages for automation and tool development.
  
  

Abilities

• Ability to think like an attacker to identify potential weaknesses.
• Ability to analyze complex systems and identify security flaws.
• Ability to effectively utilize penetration testing tools and techniques.
• Ability to clearly articulate technical findings and recommendations in written and verbal reports.
• Ability to work under pressure and manage time effectively during testing engagements.
• Ability to maintain ethical standards and confidentiality.
• Ability to continuously learn and adapt to the evolving threat landscape.
  
  

Education, Experience, Licensure, Certification Required For The Position

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5-6 years of experience in penetration testing or a closely related security role.
• Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
  
  

Competencies Required To Successfully Perform The Job

Technical Competencies

Behavioral/General Competencies

• Network, web, and mobile app penetration testing.
• Report Writing & Documentation
• Use of Penetration Testing Tools (Specify Key Tools)
• Security Assessment Methodologies
• Scripting (Python, Bash, etc.)
• Analytical Thinking
• Problem-Solving
• Attention to Detail
• Communication (Written & Verbal)
  
  

Benefits

• Excellent Salary
• Fuel Allowance
• Internet Allowance
• Medical Insurance
• Annual Leaves
• Provident Fund
• EOBI
• Annual Bonus