penetration tester

Arwen Tech

<div>
 Posted on Apr 14, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 May 25, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

IterraNetic Pvt. Limited

Job OverviewWe are seeking an experienced and highly skilled IT Specialist with a strong background in Microsoft 365, Cyber Security, and Ethical Hacking. The ideal candidate will be responsible for managing IT infrastructure, ensuring system security, and implementing efficient access controls across the organization. This role requires both technical expertise and strategic oversight to support operations across multiple locations.Key Responsibilities <ul><li>Manage and administer Microsoft 365 (Exchange, Teams, SharePoint, OneDrive, user access).</li><li>Set up and configure computers, laptops, and IT equipment for employees.</li><li>Control and manage user access, permissions, and rights across systems including SharePoint and email accounts.</li><li>Ensure proper onboarding and offboarding processes, including:</li><li>Granting system access to new employees</li><li>Revoking all access immediately when an employee leaves</li><li>Locking or securing company-issued devices</li><li>Enable and manage remote access to company devices for monitoring and support purposes.</li><li>Perform remote troubleshooting of hardware and software issues for offices in Canada and Pakistan.</li><li>Implement and maintain cybersecurity protocols to safeguard company data.</li><li>Conduct ethical hacking and penetration testing to identify vulnerabilities.</li><li>Develop, implement, and enforce IT policies related to data sharing, access control, and security.</li><li>Create and maintain IT documentation, handbooks, and user training programs.</li><li>Monitor system performance and ensure uptime, reliability, and security compliance.</li></ul>Required Skills &amp; Qualifications<ul><li>Minimum 8&ndash;9 years of experience in IT systems administration and security.</li><li>Strong expertise in Microsoft 365 administration.</li><li>In-depth knowledge of Cyber Security practices and tools.</li><li>Hands-on experience in Ethical Hacking / Penetration Testing.</li><li>Experience managing user access control and identity management systems.</li><li>Ability to remotely manage and troubleshoot devices across multiple locations.</li><li>Strong understanding of network infrastructure, firewalls, and endpoint security.</li><li>Excellent problem-solving and analytical skills.</li><li>Strong communication and documentation abilities.</li></ul>Preferred Qualifications <ul><li>Certifications such as, Microsoft Certified (Azure / M365), CEH (Certified Ethical Hacker) and CompTIA Security+ or equivalent will be preferred</li><li>Experience with remote management tools and monitoring systems</li><li>Knowledge of scripting (PowerShell, Python)</li></ul>What We Offer<ul><li>Competitive salary package</li><li>Opportunity to work across international operations</li><li>Professional growth and development</li><li>Dynamic and collaborative work environment</li></ul>Education:<ul><li>Master's (Preferred)</li></ul>Experience:<ul><li>IT Specialist: 7 years (Preferred)</li></ul>Language:<ul><li>Fluent English (Preferred)</li></ul>Work Location: Hybrid remote in Islamabad

IT Specialist

PackageX

<div>
 
 About PackageX
 
 :
 
 
 PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision-Language-Action intelligence.
 
 
 We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.
 
 
 We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.
 
 
 We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.
 
 
 
 What We Are Looking For
 
 
 
 We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.
 
 
 
 You will:
 
 
 
 <ul>
 <li>
 Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team
 </li>
 <li>
 Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed
 </li>
 <li>
 Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template
 </li>
 <li>
 Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go
 </li>
 <li>
 Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes
 </li>
 <li>
 Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker
 </li>
 <li>
 Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default
 </li>
 <li>
 Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation
 </li>
 <li>
 Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping
 </li>
 <li>
 Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team
 </li>
 <li>
 Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats
 
 
 
 </li>
 </ul>
 
 Skills and Qualification:
 
 
 
 <ul>
 <li>
 A degree in Computer Science, Information Security, or a related field
 </li>
 <li>
 3+ years of hands-on experience in application security or security engineering.
 </li>
 <li>
 Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale
 </li>
 <li>
 Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context
 </li>
 <li>
 Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise
 </li>
 <li>
 Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow
 </li>
 <li>
 Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security
 </li>
 <li>
 Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them
 </li>
 <li>
 Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on
 </li>
 <li>
 Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS
 
 
 
 </li>
 </ul>
 
 What can you expect from the application process?
 
 
 
 All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

Application Security Engineer

<div><div><div><div>About PackageX:</div>
<div>
PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision&ndash;Language&ndash;Action intelligence.</div> 
<div></div>
<div>
We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.</div> 
<div></div>
<div>
We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.</div> 
<div></div>
<div>
We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.</div> 
<div></div>
<div>
What we are looking for</div>
<div>
We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.</div> 
<div></div>
<div>
You will:
</div><ul><li>Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team.</li>
<li>Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed.</li>
<li>Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template.</li>
<li>Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go.</li>
<li>Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes.</li>
<li>Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker.</li>
<li>Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default.</li>
<li>Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation.</li>
<li>Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping.</li>
<li>Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team.</li>
<li>Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats.</li></ul> 
<div></div>
<div>
Skills and Qualification:</div>
<ul>
<li>A degree in Computer Science, Information Security, or a related field</li>
<li>3+ years of hands-on experience in application security or security engineering.
</li><li>Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale.</li>
<li>Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context.</li>
<li>Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise.</li>
<li>Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow.</li>
<li>Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security.</li>
<li>Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them.</li>
<li>Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on.</li>
<li>Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS.</li></ul> 
<div></div>
<div>
What can you expect from the application process?</div>
<div>
All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.</div> 

</div></div>
<div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Jazz

<div>
 
 
 Grade: L2
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 26 April 2026
 
 
 
 
 
 What is Expert Application &amp; Product Security?
 
 
 
 
 Expert Application &amp; Product Security
 
 is responsible to drive secure design, development, and deployment of digital products. This role is responsible for embedding security across the&nbsp;
 
 software development lifecycle (SDLC)
 
 , securing APIs and microservices, and ensuring products are resilient against evolving cyber threats.
 
 
 Main responsibility of this role is to safeguard software applications for potential threats &amp; vulnerabilities by analyzing and effectively testing implementation of different application security controls to protect organization's digital footprint from cyber threats.
 
 
 The role reports directly to the Stream Head Cyber Security with an extended team of 11 team members.
 
 
 &nbsp;
 
 
 
 What does Expert Application &amp; Product Security?
 
 
 
 1.&nbsp;&nbsp;&nbsp;&nbsp; Define and lead the&nbsp;
 
 Application Security (AppSec) strategy
 
 &nbsp;across all products
 
 
 2.&nbsp;&nbsp;&nbsp;&nbsp; Establish secure SDLC (SSDLC) frameworks and governance
 
 
 3.&nbsp;&nbsp;&nbsp;&nbsp; Develop policies, standards, and secure coding guidelines
 
 
 4.&nbsp;&nbsp;&nbsp;&nbsp; Align AppSec with enterprise risk management and business objectives
 
 
 5.&nbsp;&nbsp;&nbsp;&nbsp; Conduct threat modelling (STRIDE, attack trees) for applications and platforms
 
 
 6.&nbsp;&nbsp;&nbsp;&nbsp; Review and approve secure architectures for:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Web and mobile applications
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; APIs and microservices
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cloud-native platforms
 
 
 7.&nbsp;&nbsp;&nbsp;&nbsp; Enforce best practices based on&nbsp;OWASP&nbsp;standards (Top 10, ASVS, API Top 10)
 
 
 8.&nbsp;&nbsp;&nbsp;&nbsp; Integrate security into CI/CD pipelines:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAST, DAST, SCA, IAST
 
 
 9.&nbsp;&nbsp;&nbsp;&nbsp; Automate security testing and policy enforcement
 
 
 10.&nbsp; Work closely with DevOps teams to implement "shift-left" security
 
 
 11.&nbsp; Define security gates and release criteria
 
 
 12.&nbsp; Secure externally exposed products and services
 
 
 13.&nbsp; Implement API security controls:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authentication (OAuth2, JWT)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Rate limiting, bot protection
 
 
 14.&nbsp; Protect against:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Injection attacks
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Broken authentication
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Business logic abuse
 
 
 15.&nbsp; Secure Android/iOS applications:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reverse engineering protection
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Runtime protection (RASP)
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Secure storage &amp; communication
 
 
 16.&nbsp; Conduct mobile app security testing
 
 
 17.&nbsp; Implement API gateways and secure API lifecycle management
 
 
 18.&nbsp; Conduct secure coding training for developers
 
 
 19.&nbsp; Provide remediation guidance and best practices
 
 
 20.&nbsp; Build a security-first culture within software engineering teams
 
 
 &nbsp;
 
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 Requirements
 
 
 
 
 
 What are we looking for and what does it require to be Expert Application &amp; Product Security?
 
 
 <ul>
 <li>
 BS/MS in CyberSecurity/Information security/Information Technology
 </li>
 <li>
 Practical experience of application security in Banking / Telco sector
 </li>
 </ul>
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least 04 years of experience in security design and penetration testing of mobile applications &amp; APIs
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Functional
 
 
 
 o&nbsp;&nbsp; Ability to organize, plan and document tasks;
 
 
 o&nbsp;&nbsp; Ability to manage internal &amp; external stakeholders;
 
 
 o&nbsp;&nbsp; Possess good logical and analytical skills to help in analysis of Cyber Security risks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Technical
 
 
 
 o&nbsp;&nbsp; Strong expertise in:
 
 
 &sect;&nbsp; Web application security (OWASP Top 10)
 
 
 &sect;&nbsp; API security and microservices
 
 
 &sect;&nbsp; Authentication &amp; authorization models
 
 
 o&nbsp;&nbsp; Experience with manual penetration testing
 
 
 o&nbsp;&nbsp; Hands-on with:
 
 
 &sect;&nbsp; SAST: Checkmarx, Fortify, SonarQube
 
 
 &sect;&nbsp; DAST: Burp Suite, OWASP ZAP
 
 
 &sect;&nbsp; SCA: Snyk, Black Duck
 
 
 o&nbsp;&nbsp; Understanding of:
 
 
 &sect;&nbsp; Java, .NET, Node.js, Python (at least one deeply)
 
 
 &sect;&nbsp; CI/CD pipelines (Jenkins, GitLab, GitHub Actions)
 
 
 o&nbsp;&nbsp; Familiarity with Infrastructure as Code (Terraform, etc.)
 
 
 o&nbsp;&nbsp; Lead and mentor Application Security Testers
 
 
 o&nbsp;&nbsp; Define KPIs and performance metrics
 
 
 o&nbsp;&nbsp; Stakeholder management across Dev, QA, Product, and Risk teams
 
 
 
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Application & Product Security

I&K ENTERPRISES

At I&amp;K Enterprises, we are looking for an experienced female BA Supervisor to lead our North team in Islamabad &amp; Rawalpindi. The ideal candidate should have a strong eye for detail and a lead-by-example approach, with the ability to coach Brand Ambassadors in grooming, SOP compliance, and sales performance.See full Job Description below:Job Description:Position Purpose:The BA Supervisor plays a key role in connecting brand strategy with on-ground execution. This position involves leading and mentoring Brand Ambassadors in the North region to ensure strong performance, proper brand representation, and achievement of sales targets.Key Accountabilities:<ul><li>Market Visits: Frequent field visits to monitor the presence and activity of Brand Ambassadors.</li><li>Training &amp; Development: Conduct regular training sessions to enhance BAs&rsquo; overall skills, including product knowledge, communication, customer engagement, and professional conduct.</li><li>Sales Performance Review: Monitoring individual sales targets and analyzing performance gaps to provide corrective measures.</li><li>Team Handling: Manage BA attendance, discipline, and resolve on-ground issues.</li><li>KPI Monitoring &amp; Evaluation: Continuous evaluation of BA KPIs and work on improving communication skills, customer engagement, and timely issue resolution.</li><li>Attire &amp; Grooming: Ensure adherence to uniform, grooming, and professional presentation standards.</li><li>SOP Monitoring: Ensure BAs follow organizational SOPs (such as product demos, tester management, and hygiene practices).</li></ul>Key Attributes &amp; Mind Set:<ul><li>Observation Skills: Able to identify grooming and display gaps in a timely manner.</li><li>Communication Skills: Effectively communicates with team members and delivers clear guidance and feedback to improve performance.</li><li>Data Driven Approach: Focused on improving sales through BA coaching.</li><li>Multitasking: Capable of managing multiple Tasks effectively.</li><li>Positive Mindset: Patiently teaching and polishing team skills.</li><li>Leadership Personality: Sets an example with professional behavior and appearance.</li></ul>Job Requirements:<ul><li>Qualification: Bachelors (Preferably in Business or Marketing).</li><li>Experience: 1-2 Years in Relevant Field (requires frequent field travel).</li><li>Gender: Female</li><li>Location: Islamabad/Rawalpindi</li></ul>Application Instructions:Interested candidates must email their applications to careers@iandk.com.pk with a copy of their CV, and Use the subject line &ldquo;Brand Ambassadors (BA) Supervisor-North&rdquo;.Apply By20th April, 2026Note: Candidates must only apply if their CV is highly relevant to the required qualifications and experience outlined above.Pay: Rs40,000.00 - Rs50,000.00 per monthWork Location: In person

Brand Ambassadors (BA) Supervisor - North

Pakistan Virtual Assets Regulatory Authority

<div>
 
 About PVARA:
 
 
 
 ﻿Pakistan's Virtual Assets Act, 2025 introduces the country's first comprehensive legal framework for overseeing virtual assets and the businesses that operate in this space. PVARA is the dedicated authority responsible for licensing, supervising, and regulating Virtual Assets (VAs) and Virtual Asset Service Providers (VASPs) operating in the country.
 
 
 
 About the Role
 
 
 
 <ul>
 <li>
 At least 8&ndash;10 years of experience in technology leadership, cybersecurity, Blockchain development, or technology risk management, with:
 </li>
 <li>
 Proven track record leading technology functions in financial services, fintech, or regulatory organizations.
 </li>
 <li>
 Deep hands-on experience with Blockchain protocols, smart contracts, and cryptographic systems.
 </li>
 <li>
 Strong cybersecurity expertise including threat modeling, penetration testing, and incident response.
 </li>
 <li>
 Experience building technology infrastructure, data platforms, and analytics capabilities.
 </li>
 <li>
 Understanding of technology governance, risk management, and regulatory requirements.
 
 
 
 </li>
 </ul>
 
 Education Requirements:
 
 
 ﻿
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or equivalent in Computer Science, Cybersecurity, Cryptography, Information Systems, AI, Data Science, Blockchain or closely related technological discipline.
 </li>
 <li>
 Professional certifications such as CISSP, CEH, CISM, or Blockchain certifications (CBP, CBDE) shall be an added advantage.
 
 
 
 
 </li>
 </ul>
 Note: &ldquo;This application form is integrated with PVARA&rsquo;s official recruitment portal (recruitment.pvara.team). All submissions will be treated as official applications.&rdquo;
 
</div>

General Manager (Technology & Cyber Risk)

Explore 13+ Penetration tester in Islamabad this May. Find roles across top companies and apply now to boost your career.

13 penetration tester jobs In Islamabad

Penetration Tester

IT Specialist

Application Security Engineer

Application Security Engineer

Expert Application & Product Security

Brand Ambassadors (BA) Supervisor - North

General Manager (Technology & Cyber Risk)