application penetration tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

Arwen Tech

<div>
 Posted on Apr 14, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 May 25, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

Innovative Solutions

<div>Company Description
Innovative Solutions (IS) is a premier Cybersecurity company operating across the GCC since 2003, with headquarters in Riyadh and offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We provide comprehensive Cybersecurity Solutions and Services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
Our mission is to &quot;Bring Trust to Cyberspace&quot; and ensure &quot;Your Business, Secured&quot;.
Role Overview
We are seeking a skilled Penetration Tester (RE) to join our cybersecurity team. The successful candidate will be responsible for performing penetration tests and vulnerability assessments on various systems and applications to identify and exploit potential security weaknesses.
Key Responsibilities<ul><li>
Execute detailed penetration testing activities across applications, networks, and systems to discover vulnerabilities.</li><li>
Analyze and exploit identified security risks to assess impact and risk level.</li><li>
Document findings thoroughly and provide clear recommendations to remediate vulnerabilities.</li><li>
Work closely with internal teams to promote the adoption of security best practices and corrective actions.</li><li>
Stay updated on the latest penetration testing tools, techniques, and cybersecurity trends to continuously improve testing methodologies.</li></ul> 

Requirements 
<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
Proven experience in penetration testing or related cybersecurity roles.</li><li>
Strong knowledge of network protocols, systems architecture, and common vulnerabilities.</li><li>
Hands-on experience with penetration testing tools such as Metasploit, Burp Suite, Nessus, and other relevant software.</li><li>
Familiarity with vulnerability assessment techniques and exploit development.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Certifications such as OSCP, CEH, CISSP, or equivalent are highly desirable.</li></ul></div>

Penetration Tester (RE)

KAM Security & Software

Junior Penetration Tester Aranıyor!Siber g&uuml;venlik alanında kariyer yapmak isteyenler i&ccedil;in harika bir fırsat! Ekibimize katılacak Junior Penetration Tester, ger&ccedil;ek m&uuml;şteri projelerinde g&ouml;rev alarak network, web uygulama ve altyapı sızma testleri ger&ccedil;ekleştirecek. Deneyimli senior uzmanlarla &ccedil;alışma ve hızlı b&uuml;y&uuml;me imkanı sunuyoruz.Sorumluluklar<ul><li>Sızma Testleri: Web uygulamaları ve ağ (network) altyapılarına y&ouml;nelik sızma testleri y&uuml;r&uuml;tmek.</li><li>Zafiyet Analizi: OWASP Top 10 ve CVE tabanlı g&uuml;ncel zafiyet taramaları ile analizleri ger&ccedil;ekleştirmek.</li><li>Raporlama: Tespit edilen zafiyetleri, hem teknik hem de y&ouml;netici &ouml;zetlerini i&ccedil;eren kapsamlı raporlara d&ouml;n&uuml;şt&uuml;rmek.</li><li>Operasyonel Destek: Red Team operasyonlarında aktif rol alarak ekibe destek sağlamak.</li></ul>Aradığımız Profil<ul><li>Eğitim: Bilgisayar M&uuml;hendisliği, Siber G&uuml;venlik veya ilgili b&ouml;l&uuml;mlerde lisans/&ouml;nlisans &ouml;ğrencisi veya mezunu olmak.</li><li>Teknik Yetkinlik: Linux komut satırına hakimiyet ve temel ağ protokolleri (TCP/IP, DNS, HTTP) konusunda bilgi sahibi olmak.</li><li>Ara&ccedil; Bilgisi: Burp Suite, Nmap ve Metasploit gibi siber g&uuml;venlik ara&ccedil;larına aşinalık.</li><li>Scripting: Python veya Bash dillerini kullanarak temel otomasyon scriptleri yazabilmek.</li><li>Deneyim ve Gelişim: TryHackMe, HackTheBox veya benzer platformlarda aktif bir profilin olması b&uuml;y&uuml;k bir artı.</li><li>Sertifikasyon: eJPT, CompTIA Security+, CEH gibi sekt&ouml;rel ge&ccedil;erliliği olan sertifikalara sahip olmak tercih sebebidir.</li></ul>İş T&uuml;r&uuml;: Tam zamanlıWork Location: Hybrid remote in T&uuml;rkiye

Jr Penetration Tester

VentureDive

<div>Job Brief: 
We are seeking a highly skilled and detail-oriented Penetration Tester to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture. 
 
Key Responsibilities:<ul><li>
Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks.</li><li>
Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards.</li><li>
Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC.</li><li>
Develop and maintain detailed reports on security findings, remediation strategies, and best practices.</li><li>
Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies.</li><li>
Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency.</li><li>
Establish and refine QA and security processes to maintain the highest standards of software quality and protection.</li><li>
Participate in security incident response initiatives when necessary.</li><li>
Advise cross-functional teams on integrating security measures into product design and deployment.</li><li>
Maintain awareness and application of cloud security principles and best practices.</li><li>
Know Exploitation techniques (XSS, SQLi, SSRF, RCE)</li><li>
API security testing</li><li>
Mobile/Web pentesting specifics</li><li>
Red teaming exposure (optional but strong)</li></ul> 

Tools &amp; Technologies<ul><li>
Hands-on experience with tools such as:</li><li>
Burp Suite</li><li>
OWASP ZAP</li><li>
Metasploit Framework</li><li>
Nmap</li><li>
MobSF (for mobile security testing)</li><li>
Other vulnerability scanners and exploitation tools</li></ul> 

Qualifications &amp; Expertise<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience).</li><li>
Proven experience in penetration testing / ethical hacking / offensive security.</li><li>
Strong understanding of:</li><li>
Web application architecture</li><li>
HTTP/HTTPS protocols</li><li>
Authentication mechanisms (OAuth, JWT, session-based auth)</li><li>
Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques.</li><li>
Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST).</li><li>
Hands-on experience with scripting languages such as Python, Bash, or PowerShell.</li><li>
Strong analytical and problem-solving skills.</li><li>
Strong knowledge of network penetration testing methodologies</li><li>
Experience performing vulnerability validation and risk analysis</li></ul> 

Certifications (Preferred)<ul><li>
OSCP (Offensive Security Certified Professional)</li><li>
CEH (Certified Ethical Hacker)</li></ul> 
What we look for beyond required skills 
In order to thrive at VentureDive, you 
&hellip;are intellectually smart and curious 
&hellip;have the passion for and take pride in your work 
&hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values 
&hellip;have a no-frills attitude 
&hellip;are a collaborative team player 
&hellip;are ethical and honest 
 
Are you ready to put your ideas into products and solutions that will be used by millions? 
You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball! 
 
#LI-Hybrid
7lxPbjOy0u</div>

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

Search 10000+ Application penetration tester jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 application penetration tester jobs Near Me

Mobile Application Penetration Tester

Penetration Tester

Penetration Tester (RE)

Jr Penetration Tester

Penetration Tester

Penetration Tester

Mid-Level Penetration Tester