security tester

Arwen Tech

<div>
 Posted on Apr 14, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 May 25, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

KAM Security & Software

Junior Penetration Tester Aranıyor!Siber g&uuml;venlik alanında kariyer yapmak isteyenler i&ccedil;in harika bir fırsat! Ekibimize katılacak Junior Penetration Tester, ger&ccedil;ek m&uuml;şteri projelerinde g&ouml;rev alarak network, web uygulama ve altyapı sızma testleri ger&ccedil;ekleştirecek. Deneyimli senior uzmanlarla &ccedil;alışma ve hızlı b&uuml;y&uuml;me imkanı sunuyoruz.Sorumluluklar<ul><li>Sızma Testleri: Web uygulamaları ve ağ (network) altyapılarına y&ouml;nelik sızma testleri y&uuml;r&uuml;tmek.</li><li>Zafiyet Analizi: OWASP Top 10 ve CVE tabanlı g&uuml;ncel zafiyet taramaları ile analizleri ger&ccedil;ekleştirmek.</li><li>Raporlama: Tespit edilen zafiyetleri, hem teknik hem de y&ouml;netici &ouml;zetlerini i&ccedil;eren kapsamlı raporlara d&ouml;n&uuml;şt&uuml;rmek.</li><li>Operasyonel Destek: Red Team operasyonlarında aktif rol alarak ekibe destek sağlamak.</li></ul>Aradığımız Profil<ul><li>Eğitim: Bilgisayar M&uuml;hendisliği, Siber G&uuml;venlik veya ilgili b&ouml;l&uuml;mlerde lisans/&ouml;nlisans &ouml;ğrencisi veya mezunu olmak.</li><li>Teknik Yetkinlik: Linux komut satırına hakimiyet ve temel ağ protokolleri (TCP/IP, DNS, HTTP) konusunda bilgi sahibi olmak.</li><li>Ara&ccedil; Bilgisi: Burp Suite, Nmap ve Metasploit gibi siber g&uuml;venlik ara&ccedil;larına aşinalık.</li><li>Scripting: Python veya Bash dillerini kullanarak temel otomasyon scriptleri yazabilmek.</li><li>Deneyim ve Gelişim: TryHackMe, HackTheBox veya benzer platformlarda aktif bir profilin olması b&uuml;y&uuml;k bir artı.</li><li>Sertifikasyon: eJPT, CompTIA Security+, CEH gibi sekt&ouml;rel ge&ccedil;erliliği olan sertifikalara sahip olmak tercih sebebidir.</li></ul>İş T&uuml;r&uuml;: Tam zamanlıWork Location: Hybrid remote in T&uuml;rkiye

Jr Penetration Tester

Innovative Solutions

<div>Company Description
Innovative Solutions (IS) is a premier Cybersecurity company operating across the GCC since 2003, with headquarters in Riyadh and offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We provide comprehensive Cybersecurity Solutions and Services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
Our mission is to &quot;Bring Trust to Cyberspace&quot; and ensure &quot;Your Business, Secured&quot;.
Role Overview
We are seeking a skilled Penetration Tester (RE) to join our cybersecurity team. The successful candidate will be responsible for performing penetration tests and vulnerability assessments on various systems and applications to identify and exploit potential security weaknesses.
Key Responsibilities<ul><li>
Execute detailed penetration testing activities across applications, networks, and systems to discover vulnerabilities.</li><li>
Analyze and exploit identified security risks to assess impact and risk level.</li><li>
Document findings thoroughly and provide clear recommendations to remediate vulnerabilities.</li><li>
Work closely with internal teams to promote the adoption of security best practices and corrective actions.</li><li>
Stay updated on the latest penetration testing tools, techniques, and cybersecurity trends to continuously improve testing methodologies.</li></ul> 

Requirements 
<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
Proven experience in penetration testing or related cybersecurity roles.</li><li>
Strong knowledge of network protocols, systems architecture, and common vulnerabilities.</li><li>
Hands-on experience with penetration testing tools such as Metasploit, Burp Suite, Nessus, and other relevant software.</li><li>
Familiarity with vulnerability assessment techniques and exploit development.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Certifications such as OSCP, CEH, CISSP, or equivalent are highly desirable.</li></ul></div>

Penetration Tester (RE)

VentureDive

<div>Job Brief: 
We are seeking a highly skilled and detail-oriented Penetration Tester to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture. 
 
Key Responsibilities:<ul><li>
Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks.</li><li>
Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards.</li><li>
Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC.</li><li>
Develop and maintain detailed reports on security findings, remediation strategies, and best practices.</li><li>
Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies.</li><li>
Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency.</li><li>
Establish and refine QA and security processes to maintain the highest standards of software quality and protection.</li><li>
Participate in security incident response initiatives when necessary.</li><li>
Advise cross-functional teams on integrating security measures into product design and deployment.</li><li>
Maintain awareness and application of cloud security principles and best practices.</li><li>
Know Exploitation techniques (XSS, SQLi, SSRF, RCE)</li><li>
API security testing</li><li>
Mobile/Web pentesting specifics</li><li>
Red teaming exposure (optional but strong)</li></ul> 

Tools &amp; Technologies<ul><li>
Hands-on experience with tools such as:</li><li>
Burp Suite</li><li>
OWASP ZAP</li><li>
Metasploit Framework</li><li>
Nmap</li><li>
MobSF (for mobile security testing)</li><li>
Other vulnerability scanners and exploitation tools</li></ul> 

Qualifications &amp; Expertise<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience).</li><li>
Proven experience in penetration testing / ethical hacking / offensive security.</li><li>
Strong understanding of:</li><li>
Web application architecture</li><li>
HTTP/HTTPS protocols</li><li>
Authentication mechanisms (OAuth, JWT, session-based auth)</li><li>
Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques.</li><li>
Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST).</li><li>
Hands-on experience with scripting languages such as Python, Bash, or PowerShell.</li><li>
Strong analytical and problem-solving skills.</li><li>
Strong knowledge of network penetration testing methodologies</li><li>
Experience performing vulnerability validation and risk analysis</li></ul> 

Certifications (Preferred)<ul><li>
OSCP (Offensive Security Certified Professional)</li><li>
CEH (Certified Ethical Hacker)</li></ul> 
What we look for beyond required skills 
In order to thrive at VentureDive, you 
&hellip;are intellectually smart and curious 
&hellip;have the passion for and take pride in your work 
&hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values 
&hellip;have a no-frills attitude 
&hellip;are a collaborative team player 
&hellip;are ethical and honest 
 
Are you ready to put your ideas into products and solutions that will be used by millions? 
You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball! 
 
#LI-Hybrid
7lxPbjOy0u</div>

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. 
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
 
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems. 
 
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Penetration Testing: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li>Adversary Simulation (Red Teaming): Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li>Vulnerability &amp; Application Security Analysis: Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li>Report Development: Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li>Control Evasion &amp; Social Engineering: Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li>Tool Development &amp; Reporting: Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li>Security Awareness: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Centillion Hub Ltd

Role SummaryYou will lead and execute mobile application penetration tests on iOS and Android platforms for clients that include financial institutions and regulated enterprises. Expect real targets, complex business logic, and engagements where your findings directly harden production systems.Key Responsibilities<ul><li>Conduct end-to-end penetration tests on Android (APK/AAB) and iOS (IPA) applications following OWASP MASVS and MSTG methodologies.</li><li>Perform static analysis (SAST), dynamic analysis (DAST), and runtime instrumentation using Frida, Objection, and custom tooling.</li><li>Reverse engineer mobile binaries using Jadx, Ghidra, Hopper, IDA, and Apktool to identify vulnerabilities and bypass client-side controls.</li><li>Assess API and backend security (REST, GraphQL, gRPC) as part of mobile engagements, including authentication, authorization, and session management flaws.</li><li>Bypass anti-tamper, SSL/certificate pinning, root/jailbreak detection, and code obfuscation.</li><li>Identify hardcoded secrets, insecure storage, weak cryptography, insecure IPC, deep link abuse, and platform misconfigurations.</li><li>Write client-ready reports with executive summaries, technical findings, severity ratings, reproduction steps, and remediation guidance.</li><li>Present findings to technical and non-technical stakeholders, including debrief calls and retest cycles.</li><li>Contribute to internal tooling, methodology, and knowledge base.</li></ul>Required Qualifications<ul><li>2+ years of hands-on mobile penetration testing experience.</li><li>Strong grasp of OWASP MASVS, MSTG, and Mobile Top 10.</li><li>Proficiency with Burp Suite, Frida, Objection, MobSF, Jadx, Apktool, Ghidra, and proxy interception on mobile.</li><li>Experience with SSL pinning bypass, root/jailbreak detection bypass, and runtime hooking.</li><li>Working knowledge of Android internals (Dalvik/ART, Smali, AndroidManifest, intents, content providers) and iOS internals (Objective-C/Swift, entitlements, Keychain, URL schemes).</li><li>API security testing skills (OWASP API Top 10).</li><li>Scripting in Python or Bash, with the ability to write custom Frida scripts in JavaScript.</li><li>Strong technical writing and root-cause analysis.</li><li>Comfortable working independently and managing engagement timelines.</li></ul>Preferred Qualifications<ul><li>Certifications: OSCP, eMAPT, OSWE, CRTP, GMOB, or equivalent.</li><li>CVE credits, bug bounty track record (HackerOne, Bugcrowd, Synack), or published research.</li><li>Experience testing banking, fintech, or healthcare mobile apps, especially in regulated environments (SBP, HIPAA).</li><li>Familiarity with SAST/DAST automation and CI/CD security integration.</li><li>Experience with smali patching, custom APK repackaging, and Magisk/Zygisk modules.</li><li>Understanding of mobile malware analysis and threat modeling (STRIDE, PASTA).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsWork Location: Hybrid remote in Lahore Johar Town

Mobile Application Penetration Tester

Search 8597+ Security tester jobs near you this May. New roles added regularly across leading industries. Apply today.

8597 security tester jobs Near Me

Penetration Tester

Jr Penetration Tester

Penetration Tester (RE)

Penetration Tester

AI Penetration Testing Specialist

Information Security Engineer - VAPT (Saudi National)

Mobile Application Penetration Tester