software quality assurance engineer Jobs in Lahore

software quality assurance engineer

ai security architect

android developer

application development officer Jobs in Lahore

application development officer

bi developer & engineer

mobile application penetration tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

VentureDive

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

Penetration Tester

NKU Technologies Pvt.Ltd.

We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.Key Responsibilities:<ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>7&ndash;10 years of hands-on experience in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul>Preferred Certifications:<ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul>Key Skills:<ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul>Nice to Have:<ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul>Working Model:<ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li><li>May require flexibility for testing windows and incident response support</li></ul>Pay: From Rs300,000.00 per monthWork Location: In person

Lead Cyber Security Officer

We are seeking a skilled Security Consultant (Offensive Security) with 5&ndash;7 years of experience to support and deliver client-facing security assessment services. This role will work closely with the Lead Penetration Tester/CISO to execute penetration tests, vulnerability assessments, and threat hunting activities, while also contributing to external threat intelligence efforts such as dark web and online community monitoring. The ideal candidate will have strong technical expertise and the ability to independently execute tasks while supporting engagement leadership.Key Responsibilities:<ul><li>Support the Lead Penetration Tester in planning, scoping, and executing client engagements.</li><li>Participate in defining testing strategies, methodologies, and rules of engagement.</li><li>Act as a secondary point of contact for clients during assessments.</li><li>Perform penetration testing across web applications, networks, APIs, and cloud environments.</li><li>Conduct vulnerability assessments and validate findings through manual testing.</li><li>Execute portions of red team or adversary simulation exercises under guidance.</li><li>Perform proactive threat hunting to identify indicators of compromise (IOCs) and suspicious activities.</li><li>Analyze logs, endpoint data, and network traffic to detect potential threats.</li><li>Support development of threat hunting hypotheses and detection use cases.</li><li>Conduct monitoring and targeted searches across dark web sources, forums, and platforms such as Discord.</li><li>Identify potential data leaks, credential exposure, and threat actor activity relevant to clients.</li><li>Correlate external intelligence with internal findings to enhance overall risk visibility.</li><li>Prepare detailed technical reports with clear findings and remediation recommendations.</li><li>Support the Lead in presenting results to client stakeholders.</li><li>Translate technical vulnerabilities into business risk where required.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to internal playbooks, tools, and methodologies.</li><li>Stay current with emerging threats, tools, and offensive security techniques.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>5&ndash;7 years of hands-on experience in penetration testing, vulnerability assessment, or offensive security.</li><li>Experience working in a client-facing or consulting environment.</li><li>Strong understanding of network security, application security, and system architecture.</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Familiarity with frameworks such as OWASP Top 10, MITRE ATT&amp;CK, and CVSS.</li><li>Experience with OSINT, threat intelligence, or dark web monitoring is a plus.</li></ul>Preferred Certifications:<ul><li>OSCP (or working toward it)</li><li>CEH, GPEN, or GWAPT</li><li>Other relevant offensive security certifications</li></ul>Key Skills:<ul><li>Strong technical and analytical skills</li><li>Ability to work independently while collaborating with senior team members</li><li>Good client communication and reporting skills</li><li>Attention to detail and risk-based thinking</li></ul>Nice to Have:<ul><li>Experience with cloud security (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Exposure to SIEM/EDR platforms</li><li>Experience with red teaming or adversary simulation</li></ul>Pay: From Rs250,000.00 per monthWork Location: In person

Cyber Security Officer

ACE Money Transfer

<div>
 
 Chief Technology Officer (CTO) &ndash; ACE Money Transfer
 
 
 
 
 About Ace Money Transfer
 
 
 
 ACE Money Transfer is a leading fintech company specializing in cross-border payments for customers across Europe, Canada, the UK, and Australia. We are committed to delivering secure, scalable, and customer-centric digital financial services while driving innovation in AI/ML, intelligent automation, and compliance-driven technology platforms.
 
 
 
 Job Summary
 
 
 
 The Chief Technology Officer (CTO) will provide strategic and technical leadership across Ace Money Transfer&rsquo;s global technology organization, driving the development of cross-border payment platforms, AI/ML initiatives, mobile applications, and regulatory compliance. This senior role requires a strong record of accomplishment in applied AI/ML leadership, scalable systems engineering, and secure financial technologies. The CTO will also champion DevSecOps practices, embedding security into every stage of the software delivery lifecycle, while ensuring resilient cloud-native infrastructures. Accountable for both the operational and financial performance of technology functions, the CTO will translate the company&rsquo;s vision into executable strategies that deliver innovative, secure, and customer-centric solutions across multiple markets.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define and execute the technology roadmap aligned with Ace Money Transfer&rsquo;s business and innovation goals.
 </li>
 <li>
 Provide technical and strategic leadership across AI/ML programs focused on intelligent document processing, OCR, and LLM-based solutions.
 </li>
 <li>
 Translate vision into actionable AI/ML strategies, aligning technology innovation with business outcomes.
 </li>
 <li>
 Drive cross-border payments platform scalability, including UPI architecture, APIs, and cloud-native microservices.
 </li>
 <li>
 Oversee high-level technical designs and architectures for scalable and performant payment and AI platforms.
 </li>
 <li>
 Implement AI/ML for fraud detection, risk scoring, and intelligent automation.
 </li>
 <li>
 Oversee regulatory compliance with GDPR, PCI-DSS, DORA, Central Bank of Ireland, FCA, and ISO-27001 regulations.
 </li>
 <li>
 Champion penetration testing, cybersecurity frameworks, and resilience best practices
 </li>
 <li>
 Design and execute Disaster Recovery (DR) and Business Continuity Plans (BCP) to safeguard mission-critical operations.
 </li>
 <li>
 Lead and mentor cross-functional teams of data scientists, ML engineers, and software developers.
 </li>
 <li>
 Foster collaboration with compliance, product, and business stakeholders to deliver secure, user-first financial products
 
 
 </li>
 </ul>
 
 Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 10+ years of senior technology leadership in fintech, banking, or regulated financial services.
 </li>
 <li>
 Strong expertise in cross-border payments, UPI platform architecture, and remittance ecosystems.
 </li>
 <li>
 Proven track record in AI/ML leadership, especially in OCR, document AI, and LLM-based solutions.
 </li>
 <li>
 Expertise with .NET Core, Angular, cross-platform mobile development (iOS/Android), Python, and PHP.
 </li>
 <li>
 Expertise in databases (MySQL, MS SQL, PostgreSQL, DynamoDB) and data warehousing solutions for analytics and compliance reporting.
 </li>
 <li>
 Strong knowledge of cloud technologies (AWS, Azure, GCP), including containers, Kubernetes, and Docker.
 </li>
 <li>
 Deep experience in cybersecurity, DevSecOps, penetration testing, and IT resilience frameworks.
 </li>
 <li>
 Experience implementing CI/CD pipelines, DevOps automation, and microservices-based architectures.
 </li>
 <li>
 Certifications: TOGAF, PMP, GDPR Certification.
 </li>
 <li>
 Strong leadership, communication, and stakeholder collaboration skills
 
 
 </li>
 </ul>
 ACE Money Transfer : Company Profile - ACE Money Transfer
 
 
 Powered by JazzHR
 
 
 CzT57FC3sD
</div>

Chief Technology Officer

<div>Chief Technology Officer (CTO) &ndash; ACE Money Transfer<h2 class="jobSectionHeader">
About Ace Money Transfer</h2>
ACE Money Transfer is a leading fintech company specializing in cross-border payments for customers across Europe, Canada, the UK, and Australia. We are committed to delivering secure, scalable, and customer-centric digital financial services while driving innovation in AI/ML, intelligent automation, and compliance-driven technology platforms.<h2 class="jobSectionHeader">
Job Summary</h2>
The Chief Technology Officer (CTO) will provide strategic and technical leadership across Ace Money Transfer&rsquo;s global technology organization, driving the development of cross-border payment platforms, AI/ML initiatives, mobile applications, and regulatory compliance. This senior role requires a strong record of accomplishment in applied AI/ML leadership, scalable systems engineering, and secure financial technologies. The CTO will also champion DevSecOps practices, embedding security into every stage of the software delivery lifecycle, while ensuring resilient cloud-native infrastructures. Accountable for both the operational and financial performance of technology functions, the CTO will translate the company&rsquo;s vision into executable strategies that deliver innovative, secure, and customer-centric solutions across multiple markets.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Define and execute the technology roadmap aligned with Ace Money Transfer&rsquo;s business and innovation goals. 
</li><li>
Provide technical and strategic leadership across AI/ML programs focused on intelligent document processing, OCR, and LLM-based solutions. 
</li><li>
Translate vision into actionable AI/ML strategies, aligning technology innovation with business outcomes. 
</li><li>
Drive cross-border payments platform scalability, including UPI architecture, APIs, and cloud-native microservices. 
</li><li>
Oversee high-level technical designs and architectures for scalable and performant payment and AI platforms. 
</li><li>
Implement AI/ML for fraud detection, risk scoring, and intelligent automation. 
</li><li>
Oversee regulatory compliance with GDPR, PCI-DSS, DORA, Central Bank of Ireland, FCA, and ISO-27001 regulations. 
</li><li>
Champion penetration testing, cybersecurity frameworks, and resilience best practices.</li><li>
Design and execute Disaster Recovery (DR) and Business Continuity Plans (BCP) to safeguard mission-critical operations. 
</li><li>
Lead and mentor cross-functional teams of data scientists, ML engineers, and software developers. 
</li><li>
Foster collaboration with compliance, product, and business stakeholders to deliver secure, user-first financial products.</li></ul><h2 class="jobSectionHeader">
Qualifications &amp; Experience</h2><ul><li>
10+ years of senior technology leadership in fintech, banking, or regulated financial services. 
</li><li>
Strong expertise in cross-border payments, UPI platform architecture, and remittance ecosystems. 
</li><li>
Proven track record in AI/ML leadership, especially in OCR, document AI, and LLM-based solutions. 
</li><li>
Expertise with .NET Core, Angular, cross-platform mobile development (iOS/Android), Python, and PHP. 
</li><li>
Expertise in databases (MySQL, MS SQL, PostgreSQL, DynamoDB) and data warehousing solutions for analytics and compliance reporting. 
</li><li>
Strong knowledge of cloud technologies (AWS, Azure, GCP), including containers, Kubernetes, and Docker. 
</li><li>
Deep experience in cybersecurity, DevSecOps, penetration testing, and IT resilience frameworks. 
</li><li>
Experience implementing CI/CD pipelines, DevOps automation, and microservices-based architectures. 
</li><li>
Certifications: TOGAF, PMP, GDPR Certification. 
</li><li>
Strong leadership, communication, and stakeholder collaboration skills.</li></ul> 
ACE Money Transfer : Company Profile - ACE Money Transfer 

CzT57FC3sD</div>

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Explore 699+ Mobile application penetration tester in Lahore this May. Find roles across top companies and apply now to boost your career.

699 mobile application penetration tester jobs In Lahore

Mobile Application Penetration Tester

Penetration Tester

Lead Cyber Security Officer

Cyber Security Officer

Chief Technology Officer

Chief Technology Officer

Offensive Security Engineer