Penetration Tester

Alykas; Karachi Division; On-site; PKR 1,800,000 - 3,400,000; Full time

Job summary

Alykas is seeking a driven Penetration Tester with 3-5 years of hands-on experience to identify, validate, and document security vulnerabilities across web, mobile, APIs, AD, networks, cloud, and infrastructure.

You will perform tests per OWASP, PTES, and NIST standards, coordinate with SOC and ITSM teams, support red team exercises, and pursue certifications such as OSCP, eWPTX, and PNP.

Qualifications

• 3–5 years of hands-on experience in offensive security.
• Identify, validate and document security vulnerabilities across web, mobile, APIs, AD, networks, cloud and infrastructure.
• Strong familiarity with OWASP, PTES and NIST testing standards.
• Ability to perform testing and exploitation, with clear reporting and risk assessment.
• Excellent communication to convey findings to technical and non-technical stakeholders.

Responsibilities

• Run penetration tests across Web and Mobile Applications, APIs, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct engagements in line with OWASP, PTES, NIST standards.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Collaborate with SOC and ITSM teams to strengthen security posture.

Skills

Penetration testing

Offensive security

Tools

OSCP

eCPPT

eWPTX

PNP

Job description

We are looking for a driven Penetration Tester with 3-5 years of hands-on experience in Offensive Security. In this role, you will identify, validate, and document security vulnerabilities across web and mobile applications, APIs, AD, networks, cloud environments, and infrastructure. The right candidate will bring strong technical expertise in offensive security methodologies, industry frameworks, and security testing tools.

Key Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with standards such as OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Nice to Have

• Hands-on experience in Red Team exercises.
• Active participation in Bug Bounty programs
• Strong industry-recognized certifications such as OSCP, eCPPT, eWPTX, PNP

Be part of the Alykas Team and kick off your tech journey!