penetration tester

Arwen Tech

<div>
 Posted on Apr 14, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 May 25, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

KAM Security & Software

Junior Penetration Tester Aranıyor!Siber g&uuml;venlik alanında kariyer yapmak isteyenler i&ccedil;in harika bir fırsat! Ekibimize katılacak Junior Penetration Tester, ger&ccedil;ek m&uuml;şteri projelerinde g&ouml;rev alarak network, web uygulama ve altyapı sızma testleri ger&ccedil;ekleştirecek. Deneyimli senior uzmanlarla &ccedil;alışma ve hızlı b&uuml;y&uuml;me imkanı sunuyoruz.Sorumluluklar<ul><li>Sızma Testleri: Web uygulamaları ve ağ (network) altyapılarına y&ouml;nelik sızma testleri y&uuml;r&uuml;tmek.</li><li>Zafiyet Analizi: OWASP Top 10 ve CVE tabanlı g&uuml;ncel zafiyet taramaları ile analizleri ger&ccedil;ekleştirmek.</li><li>Raporlama: Tespit edilen zafiyetleri, hem teknik hem de y&ouml;netici &ouml;zetlerini i&ccedil;eren kapsamlı raporlara d&ouml;n&uuml;şt&uuml;rmek.</li><li>Operasyonel Destek: Red Team operasyonlarında aktif rol alarak ekibe destek sağlamak.</li></ul>Aradığımız Profil<ul><li>Eğitim: Bilgisayar M&uuml;hendisliği, Siber G&uuml;venlik veya ilgili b&ouml;l&uuml;mlerde lisans/&ouml;nlisans &ouml;ğrencisi veya mezunu olmak.</li><li>Teknik Yetkinlik: Linux komut satırına hakimiyet ve temel ağ protokolleri (TCP/IP, DNS, HTTP) konusunda bilgi sahibi olmak.</li><li>Ara&ccedil; Bilgisi: Burp Suite, Nmap ve Metasploit gibi siber g&uuml;venlik ara&ccedil;larına aşinalık.</li><li>Scripting: Python veya Bash dillerini kullanarak temel otomasyon scriptleri yazabilmek.</li><li>Deneyim ve Gelişim: TryHackMe, HackTheBox veya benzer platformlarda aktif bir profilin olması b&uuml;y&uuml;k bir artı.</li><li>Sertifikasyon: eJPT, CompTIA Security+, CEH gibi sekt&ouml;rel ge&ccedil;erliliği olan sertifikalara sahip olmak tercih sebebidir.</li></ul>İş T&uuml;r&uuml;: Tam zamanlıWork Location: Hybrid remote in T&uuml;rkiye

Jr Penetration Tester

Innovative Solutions

<div>Company Description
Innovative Solutions (IS) is a premier Cybersecurity company operating across the GCC since 2003, with headquarters in Riyadh and offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We provide comprehensive Cybersecurity Solutions and Services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
Our mission is to &quot;Bring Trust to Cyberspace&quot; and ensure &quot;Your Business, Secured&quot;.
Role Overview
We are seeking a skilled Penetration Tester (RE) to join our cybersecurity team. The successful candidate will be responsible for performing penetration tests and vulnerability assessments on various systems and applications to identify and exploit potential security weaknesses.
Key Responsibilities<ul><li>
Execute detailed penetration testing activities across applications, networks, and systems to discover vulnerabilities.</li><li>
Analyze and exploit identified security risks to assess impact and risk level.</li><li>
Document findings thoroughly and provide clear recommendations to remediate vulnerabilities.</li><li>
Work closely with internal teams to promote the adoption of security best practices and corrective actions.</li><li>
Stay updated on the latest penetration testing tools, techniques, and cybersecurity trends to continuously improve testing methodologies.</li></ul> 

Requirements 
<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
Proven experience in penetration testing or related cybersecurity roles.</li><li>
Strong knowledge of network protocols, systems architecture, and common vulnerabilities.</li><li>
Hands-on experience with penetration testing tools such as Metasploit, Burp Suite, Nessus, and other relevant software.</li><li>
Familiarity with vulnerability assessment techniques and exploit development.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Certifications such as OSCP, CEH, CISSP, or equivalent are highly desirable.</li></ul></div>

Penetration Tester (RE)

Confidential Government

<div>
 
 We are seeking a Penetration Tester Consultant to act as an ethical adversary and relentlessly test the organization's defensive barriers.
 
 
 
 
 
 Role Overview: An elite operator role focused on simulating advanced adversary tactics and attack paths before real threat actors can disrupt operations.
 
 
 Core Purpose: To strengthen the security posture by discovering and remediating weaknesses through sophisticated, real-world attack simulations.
 
 
 
 
 
 Key Responsibilities:
 
 <ul>
 <li>
 Execute full-scope adversary simulations and complex penetration testing missions.
 </li>
 <li>
 Research and develop custom exploits and payloads to test the effectiveness of EDR/AV solutions.
 </li>
 <li>
 Provide technical debriefs to help Blue Teams refine detection and response rules.
 </li>
 </ul>
 
 
 
 
 Qualifications:
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Mathematics, or Software Engineering.
 </li>
 <li>
 5+ years of experience in Offensive Security, including 3+ years in multi-vector Red Team operations.
 </li>
 <li>
 Certifications: OSCP, OSEP, or CRT.
 </li>
 <li>
 Competencies: Deep understanding of Windows/Linux internals and expert knowledge of the MITRE ATT&amp;CK framework.
 </li>
 </ul>
 
 
</div>

Penetration Tester Consultant

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

Search 261+ Penetration tester jobs near you this May. New roles added regularly across leading industries. Apply today.