mobile application penetration tester Jobs in Lahore

mobile application penetration tester

senior manual tester

penetration tester

VentureDive

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

Penetration Tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

NKU Technologies Pvt.Ltd.

We are seeking a skilled Security Consultant (Offensive Security) with 5&ndash;7 years of experience to support and deliver client-facing security assessment services. This role will work closely with the Lead Penetration Tester/CISO to execute penetration tests, vulnerability assessments, and threat hunting activities, while also contributing to external threat intelligence efforts such as dark web and online community monitoring. The ideal candidate will have strong technical expertise and the ability to independently execute tasks while supporting engagement leadership.Key Responsibilities:<ul><li>Support the Lead Penetration Tester in planning, scoping, and executing client engagements.</li><li>Participate in defining testing strategies, methodologies, and rules of engagement.</li><li>Act as a secondary point of contact for clients during assessments.</li><li>Perform penetration testing across web applications, networks, APIs, and cloud environments.</li><li>Conduct vulnerability assessments and validate findings through manual testing.</li><li>Execute portions of red team or adversary simulation exercises under guidance.</li><li>Perform proactive threat hunting to identify indicators of compromise (IOCs) and suspicious activities.</li><li>Analyze logs, endpoint data, and network traffic to detect potential threats.</li><li>Support development of threat hunting hypotheses and detection use cases.</li><li>Conduct monitoring and targeted searches across dark web sources, forums, and platforms such as Discord.</li><li>Identify potential data leaks, credential exposure, and threat actor activity relevant to clients.</li><li>Correlate external intelligence with internal findings to enhance overall risk visibility.</li><li>Prepare detailed technical reports with clear findings and remediation recommendations.</li><li>Support the Lead in presenting results to client stakeholders.</li><li>Translate technical vulnerabilities into business risk where required.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to internal playbooks, tools, and methodologies.</li><li>Stay current with emerging threats, tools, and offensive security techniques.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>5&ndash;7 years of hands-on experience in penetration testing, vulnerability assessment, or offensive security.</li><li>Experience working in a client-facing or consulting environment.</li><li>Strong understanding of network security, application security, and system architecture.</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Familiarity with frameworks such as OWASP Top 10, MITRE ATT&amp;CK, and CVSS.</li><li>Experience with OSINT, threat intelligence, or dark web monitoring is a plus.</li></ul>Preferred Certifications:<ul><li>OSCP (or working toward it)</li><li>CEH, GPEN, or GWAPT</li><li>Other relevant offensive security certifications</li></ul>Key Skills:<ul><li>Strong technical and analytical skills</li><li>Ability to work independently while collaborating with senior team members</li><li>Good client communication and reporting skills</li><li>Attention to detail and risk-based thinking</li></ul>Nice to Have:<ul><li>Experience with cloud security (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Exposure to SIEM/EDR platforms</li><li>Experience with red teaming or adversary simulation</li></ul>Pay: From Rs250,000.00 per monthWork Location: In person

Cyber Security Officer

We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.Key Responsibilities:<ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>7&ndash;10 years of hands-on experience in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul>Preferred Certifications:<ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul>Key Skills:<ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul>Nice to Have:<ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul>Working Model:<ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li><li>May require flexibility for testing windows and incident response support</li></ul>Pay: From Rs300,000.00 per monthWork Location: In person

Lead Cyber Security Officer

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Apex HR

Hiring Electronics TechnicianExperience RequiredMinimum 2-3 YearsVFD (Variable Frequency Drive) Skills<ul><li>Repair &amp; fault diagnosis of VFDs &mdash; Siemens, ABB, Delta, Schneider, Danfoss, Yaskawa</li><li>Parameter programming: speed, torque, acceleration, deceleration settings</li><li>IGBT, capacitor &amp; driver board component-level repair</li><li>Reading fault codes and performing root cause analysis</li><li>Control wiring, PLC interfacing and panel connections</li></ul>Servo Drive Skills<ul><li>Repair &amp; tuning of servo drives and servo motors &mdash; Mitsubishi, Siemens, Panasonic, Delta</li><li>Servo parameter configuration: gain tuning, encoder settings, torque/speed control</li><li>Encoder feedback diagnosis &mdash; incremental &amp; absolute encoders</li><li>Alarm/fault code reading and servo loop troubleshooting</li><li>Replacing servo drive power boards, control boards, and IGBTs</li></ul>Candidate Must Have<ul><li>DAE in Electronics / Electrical Engineering or equivalent</li><li>Hands-on field experience in industrial or commercial setting</li><li>Proficient with multimeter, oscilloscope, clamp meter, insulation tester</li><li>Knowledge of electrical safety: LOTO, ESD, high-voltage discharge</li><li>Ability to work independently, on-site, and under deadlines email:</li></ul>Job Type: Full-timePay: Rs50,000.00 - Rs60,000.00 per monthWork Location: In person

Electronics Technician

Datamatics Global Services Ltd

<div><h2 class="jobSectionHeader">1. Senior Manual Tester</h2>
Experience: 7&ndash;10 Years 
Certification: ISTQB Foundation Level (Mandatory) 
Location : Riyadh - KSA<h3 class="jobSectionHeader">
Role Purpose</h3>
Ensure high-quality software delivery through comprehensive manual testing, defect management, and validation of functional and business requirements.<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul><li>
Design, develop, and execute detailed test cases and test scenarios based on business and functional requirements.</li><li>
Perform functional, regression, integration, and system testing.</li><li>
Identify, log, track, and verify defects using test management and defect tracking tools.</li><li>
Collaborate with developers, business analysts, and stakeholders to clarify requirements and resolve issues.</li><li>
Participate in requirement analysis and provide input from a QA perspective.</li><li>
Ensure test coverage, traceability, and documentation of testing activities.</li><li>
Support UAT cycles and production validation.</li><li>
Mentor junior testers and promote QA best practices.</li></ul><h3 class="jobSectionHeader">
Required Skills</h3><ul><li>
Strong expertise in manual testing methodologies and QA processes.</li><li>
Experience with test management and defect tracking tools (e.g., Jira, TestRail, ALM).</li><li>
Solid understanding of SDLC and STLC.</li><li>
Strong analytical and problem-solving skills.</li><li>
Good knowledge of SQL for data validation (preferred).</li><li>
Excellent communication and documentation skills.</li></ul>
hxpStpY2Np</div>

Senior Manual Tester

Explore 20+ Penetration tester in Lahore this May. Find roles across top companies and apply now to boost your career.