Hands-on Penetration Tester – Web, Cloud & Apps

Pluto IT Solutions INC; Lahore; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

Pluto IT Solutions INC, a Canada-based cybersecurity company with a Lahore team, seeks a Penetration Tester to identify security weaknesses across client environments. The role emphasizes manual testing, practical risk validation, and formal methodologies such as OWASP, PTES, NIST, and MITRE ATT&CK.

Responsibilities include planning and executing tests across web, API, mobile, network, and cloud environments; performing recon, exploitation, and post‑exploitation analysis; and delivering clear,

Qualifications

• Hands-on penetration testing across web apps, APIs, networks, cloud, or mobile.
• Solid understanding of OWASP Top 10 and common auth flaws.
• Reconnaissance, vulnerability analysis, exploitation, privilege escalation, attack-path validation.
• Knowledge of Linux/Windows, TCP/IP, DNS, HTTP, scripting; familiarity with testing tools.
• Familiarity with PTES, NIST, MITRE ATT&CK, CVSS; strong written and verbal communication.

Responsibilities

• Plan and execute penetration tests for web apps, APIs, mobile apps, networks, and cloud.
• Perform recon, vulnerability discovery, exploitation and post-exploitation activities.
• Combine manual techniques with tools to reduce false positives and show business impact.
• Document findings with evidence, risk ratings, remediation guidance, and executive summaries.
• Collaborate with consultants and clients to validate findings and explain attack paths.

Skills

Penetration testing

Technical writing

Client communication

Analytical thinking

Tools

Burp Suite

Nmap

Metasploit

Vulnerability scanners

Job description

Pluto IT Solutions INC, a Canada-based cybersecurity company with a Lahore team, seeks a Penetration Tester to identify security weaknesses across client environments. The role emphasizes manual testing, practical risk validation, and formal methodologies such as OWASP, PTES, NIST, and MITRE ATT&CK.

Responsibilities include planning and executing tests across web, API, mobile, network, and cloud environments; performing recon, exploitation, and post‑exploitation analysis; and delivering clear,