mobile application penetration tester Jobs in Lahore

mobile application penetration tester

penetration tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

NKU Technologies Pvt.Ltd.

We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.Key Responsibilities:<ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li>7&ndash;10 years of hands-on experience in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul>Preferred Certifications:<ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul>Key Skills:<ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul>Nice to Have:<ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul>Working Model:<ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li></ul>May require flexibility for testing windows and incident response supportPay: From Rs300,000.00 per monthWork Location: In person

lead Cyber Security officer

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives
 
 
 Description: This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
 </li>
 <li>
 Participate in red team and automated pentest exercises internally or by third party.
 </li>
 <li>
 Active coordination for any third party penetration testing exercises.
 </li>
 <li>
 Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
 </li>
 <li>
 Coordination with IT infrastructure &amp; development teams for remediation.
 </li>
 <li>
 Reviewing application design and flow to identify business logic flaws.
 </li>
 <li>
 Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
 </li>
 <li>
 Support development teams for secure coding practices.
 </li>
 <li>
 Perform Cloud security review and prepare reports with gaps and remediation guidelines.
 </li>
 <li>
 Fair understanding with prompt injection, adversarial input, model inversion, hallucination attacks for LLM testing
 </li>
 <li>
 Familiarly with Gen-AI applications security assessment.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 EducationBachelors Degree in IT/CS/Software Eng./TelecomExperience3-5 years in IT Security fieldSkills and Abilities-- Must have a passion to work in the IT Security field
 
 
 <ul>
 <li>
 Does have experience in
 </li>
 <li>
 Penetration testing
 </li>
 <li>
 Vulnerability Assessment
 </li>
 <li>
 Burp Pro and other pentest tools
 </li>
 <li>
 Source Code Analysis tools
 </li>
 <li>
 OWASP strong understanding
 
 
 </li>
 </ul>
 '-- Must have good presentation skills
 
 
 <ul>
 <li>
 OSCP/OSWP/CEH (Practical) certification is required.Reporting Time03:00 PM-12:00 am (PKST)
 </li>
 </ul>
</div>

IT Security Specialist, IT

We are hiring a Cybersecurity Engineer. This role is ideal for someone with 3 to 4 years of hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li></ul>Exposure to SIEM or security monitoring toolsPay: From Rs150,000.00 per monthWork Location: In person

Offensive Security Engineer

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

ARSH INDUSTRIES (SMC-PVT) LIMITED

We&rsquo;re Hiring | Area Sales Manager (ASM) Company: Arsh Industries Location: LahoreArsh Industries is seeking a dynamic, result-driven, and experienced Area Sales Manager (ASM) to lead and expand our sales operations in the household cleaning products segment.Requirements Minimum 8 years of relevant experience in FMCG sector Experience in household cleaning products will be preferred Strong knowledge of sales operations, distribution management, and market expansion Proven track record of achieving and exceeding sales targets Strong leadership, communication, and team management skills Ability to manage distributors, retailers, and sales teams effectively Good analytical and reporting skillsKey Responsibilities Develop and execute area sales strategies to achieve business targets Manage and lead distributors and sales team Ensure product availability and market penetration Monitor sales performance, KPIs, and target achievement Build strong relationships with retailers, wholesalers, and distributors Ensure timely recovery and stock management Conduct market visits, competitor analysis, and reportingPackage Basic Salary: PKR 50,000 &ndash; 60,000 Fuel + TA/DA Incentive up to PKR 8,000+ Other allowances as per company policy<ul><li>How to Apply</li></ul>Send your CV to: hr@arsh-industries.com &amp; officer1_qm@arsh-industries.com WhatsApp: 0305-8974827 Subject Line: Application &ndash; Area Sales Manager (ASM)Job Type: Full-timePay: Rs60,000.00 - Rs100,000.00 per monthWork Location: In person

Area Sales Manager (ASM)

Dubizzle Labs

<div>
 At Dubizzle Labs, we are looking to further expand our Pakistan engineering office of already 400+. We are most interested in bringing on board colleagues who love to learn, perform, and teach. We are building a high-quality engineering environment with a super focus on delivering value to customers. Your primary responsibility would be to build world-class suite products to support the hyper-growth of our businesses in 10 countries.
 
 
 
 Job Requirements
 
 
 
 <ul>
 <li>
 1 plus years of experience in Software Quality Assurance (Tested Web and Mobile Apps).
 </li>
 <li>
 Participate in all aspects of SDLC to advocate quality
 </li>
 <li>
 Write test cases based on business /technical requirements, use cases, and design documents.
 </li>
 <li>
 Perform black box and white box testing and help coordinate the QA process by tracking defects, and managing release processes.
 </li>
 <li>
 Develop and Execute Test scenarios and test cases.
 </li>
 <li>
 Ability to stay focused and prioritize a heavy workload while achieving exceptional quality.
 </li>
 <li>
 Lead process improvements to provide improved quality assurance and reduction in testing cycle time.
 </li>
 <li>
 SQA Lifecycle implementation for the projects
 </li>
 <li>
 Report test results to the management team
 </li>
 <li>
 Knowledge of Security Testing [Penetration Testing]
 </li>
 <li>
 Experience with Agile/Scrum development process
 </li>
 <li>
 REST API testing
 </li>
 <li>
 Strong working knowledge of SQL and Relational Databases
 </li>
 <li>
 Stay up to date with new testing tools and technologies.
 
 
 
 </li>
 </ul>
 
 Mandatory Qualities
 
 
 
 <ul>
 <li>
 Must be able to work with a team to participate actively in product development and technical architecture.
 </li>
 <li>
 Must have the start-up mindset: curious, smart, and proactive.
 </li>
 <li>
 Must manage time and priorities to deliver projects effectively and within set deadlines.
 </li>
 <li>
 Must have strong project management, organizational, and planning skills.
 </li>
 </ul>
</div>

SQA Engineer

Explore 15+ Penetration tester in Lahore this May. Find roles across top companies and apply now to boost your career.

15 penetration tester jobs In Lahore

Mobile Application Penetration Tester

lead Cyber Security officer

IT Security Specialist, IT

Offensive Security Engineer

Offensive Security Engineer

Area Sales Manager (ASM)

SQA Engineer