offensive security engineer Jobs in Lahore

offensive security engineer

software quality assurance engineer Jobs in Lahore

software quality assurance engineer

android developer

it security analyst

mobile app developer android Jobs in Lahore

mobile app developer android

mobile application penetration tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

NKU Technologies Pvt.Ltd.

We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.Key Responsibilities:<ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>7&ndash;10 years of hands-on experience in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul>Preferred Certifications:<ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul>Key Skills:<ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul>Nice to Have:<ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul>Working Model:<ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li></ul>May require flexibility for testing windows and incident response supportPay: From Rs300,000.00 per monthWork Location: In person

lead Cyber Security officer

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives
 
 
 Description: This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
 </li>
 <li>
 Participate in red team and automated pentest exercises internally or by third party.
 </li>
 <li>
 Active coordination for any third party penetration testing exercises.
 </li>
 <li>
 Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
 </li>
 <li>
 Coordination with IT infrastructure &amp; development teams for remediation.
 </li>
 <li>
 Reviewing application design and flow to identify business logic flaws.
 </li>
 <li>
 Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
 </li>
 <li>
 Support development teams for secure coding practices.
 </li>
 <li>
 Perform Cloud security review and prepare reports with gaps and remediation guidelines.
 </li>
 <li>
 Fair understanding with prompt injection, adversarial input, model inversion, hallucination attacks for LLM testing
 </li>
 <li>
 Familiarly with Gen-AI applications security assessment.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 EducationBachelors Degree in IT/CS/Software Eng./TelecomExperience3-5 years in IT Security fieldSkills and Abilities-- Must have a passion to work in the IT Security field
 
 
 <ul>
 <li>
 Does have experience in
 </li>
 <li>
 Penetration testing
 </li>
 <li>
 Vulnerability Assessment
 </li>
 <li>
 Burp Pro and other pentest tools
 </li>
 <li>
 Source Code Analysis tools
 </li>
 <li>
 OWASP strong understanding
 
 
 </li>
 </ul>
 '-- Must have good presentation skills
 
 
 <ul>
 <li>
 OSCP/OSWP/CEH (Practical) certification is required.Reporting Time03:00 PM-12:00 am (PKST)
 </li>
 </ul>
</div>

IT Security Specialist, IT

Dubizzle Labs

<div>
 At Dubizzle Labs, we are looking to further expand our Pakistan engineering office of already 400+. We are most interested in bringing on board colleagues who love to learn, perform, and teach. We are building a high-quality engineering environment with a super focus on delivering value to customers. Your primary responsibility would be to build world-class suite products to support the hyper-growth of our businesses in 10 countries.
 
 
 
 Job Requirements
 
 
 
 <ul>
 <li>
 1 plus years of experience in Software Quality Assurance (Tested Web and Mobile Apps).
 </li>
 <li>
 Participate in all aspects of SDLC to advocate quality
 </li>
 <li>
 Write test cases based on business /technical requirements, use cases, and design documents.
 </li>
 <li>
 Perform black box and white box testing and help coordinate the QA process by tracking defects, and managing release processes.
 </li>
 <li>
 Develop and Execute Test scenarios and test cases.
 </li>
 <li>
 Ability to stay focused and prioritize a heavy workload while achieving exceptional quality.
 </li>
 <li>
 Lead process improvements to provide improved quality assurance and reduction in testing cycle time.
 </li>
 <li>
 SQA Lifecycle implementation for the projects
 </li>
 <li>
 Report test results to the management team
 </li>
 <li>
 Knowledge of Security Testing [Penetration Testing]
 </li>
 <li>
 Experience with Agile/Scrum development process
 </li>
 <li>
 REST API testing
 </li>
 <li>
 Strong working knowledge of SQL and Relational Databases
 </li>
 <li>
 Stay up to date with new testing tools and technologies.
 
 
 
 </li>
 </ul>
 
 Mandatory Qualities
 
 
 
 <ul>
 <li>
 Must be able to work with a team to participate actively in product development and technical architecture.
 </li>
 <li>
 Must have the start-up mindset: curious, smart, and proactive.
 </li>
 <li>
 Must manage time and priorities to deliver projects effectively and within set deadlines.
 </li>
 <li>
 Must have strong project management, organizational, and planning skills.
 </li>
 </ul>
</div>

SQA Engineer

We are hiring a Cybersecurity Engineer. This role is ideal for someone with 3 to 4 years of hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li></ul>Exposure to SIEM or security monitoring toolsPay: From Rs150,000.00 per monthWork Location: In person

Offensive Security Engineer

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

BJS Soft Solution Pvt Ltd

We are seeking a versatile SQA Automation Specialist with strong command of both manual and automated testing disciplines. In this role you will own end-to-end quality assurance across web, API, and mobile platforms &mdash; designing automation frameworks, executing structured and exploratory manual tests, and embedding quality practices into every stage of the software delivery lifecycle.Core responsibilities &mdash; automation&middot; Design, build, and maintain scalable test automation frameworks using tools such as Selenium WebDriver, Playwright, or Cypress&middot; Write clean, reusable automated test scripts for functional, regression, integration, and end-to-end test scenarios&middot; Integrate automated test suites into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, or Azure DevOps)&middot; Develop and maintain API automation tests using Postman, RestAssured, or similar tools&middot; Implement BDD-style tests using Cucumber, SpecFlow, or Behave in collaboration with business stakeholders&middot; Analyse and resolve flaky tests, continuously improving automation suite reliability and execution speed&middot; Maintain test data management strategies and environment configuration for automated pipelines&middot; Generate and publish automation reports using Allure, ExtentReports, or equivalent dashboardsCore responsibilities &mdash; manual testing&middot; Create detailed, well-structured test plans, test cases, and test checklists from functional and non-functional requirements&middot; Execute manual functional, regression, smoke, sanity, and User Acceptance Testing (UAT) across multiple platforms and browsers&middot; Conduct structured exploratory and session-based testing to uncover edge cases and usability issues&middot; Log, prioritise, and track defects using tools like Jira, TestRail, Zephyr, or Azure Test Plans with clear reproduction steps&middot; Perform cross-browser, cross-device, and cross-platform compatibility testing&middot; Validate UI/UX against design specifications and accessibility standards (WCAG where applicable)&middot; Participate in requirement reviews, sprint planning, and refinement sessions to identify testability and ambiguity early&middot; Collaborate closely with developers for root cause analysis during defect triageGeneral responsibilitiesDefine and maintain test strategy, test coverage metrics, and quality dashboards for visibility across the teamAct as a quality advocate during sprint ceremonies, code reviews, and release gatesEvaluate and recommend new testing tools, techniques, and processes to improve efficiencyMentor and guide junior QA engineers on both manual best practices and automation standardsSupport performance and load testing initiatives using JMeter, k6, or GatlingEnsure all QA activities align with company-defined quality standards and compliance requirementsEducation &amp; experienceBachelor's degree in Computer Science, Software Engineering, or a related field3&ndash;6 years of QA experience with a blend of manual and automation testingProven track record of delivering quality in Agile/Scrum environmentsExperience working across the full SDLC and STLCTechnical skillsProficiency in Python, Java, JavaScript, or C# for test scriptingHands-on with Selenium, Playwright, or CypressAPI testing experience (REST/SOAP) with Postman or RestAssuredSolid Git usage and familiarity with branching workflowsExperience with defect management in Jira or similar toolsNice to haveAppium (mobile automation)Docker / containerised testingBrowserStack / Sauce LabsJMeter / k6 / GatlingISTQB Foundation / AdvancedTestRail / ZephyrAccessibility testing (WCAG)Security / penetration testing basicsDatabase / SQL testingShift-left &amp; DevOps quality practicesWork Location: In person

SQA Automation Specialist (Manual & Automation Testing)

Explore 352+ Mobile application penetration tester in Lahore this May. Find roles across top companies and apply now to boost your career.

352 mobile application penetration tester jobs In Lahore

Mobile Application Penetration Tester

lead Cyber Security officer

IT Security Specialist, IT

SQA Engineer

Offensive Security Engineer

Offensive Security Engineer

SQA Automation Specialist (Manual & Automation Testing)