Penetration Tester

Alykas; Karachi Division; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Alykas is seeking a driven Penetration Tester with 4–5 years of hands-on experience to identify, validate, and document security vulnerabilities across web, mobile apps, APIs, AD, networks, cloud environments, and infrastructure. The ideal candidate brings strong offensive security expertise and familiarity with industry frameworks and testing tools.

The role involves executing tests across multiple domains, following OWASP/PTES/NIST standards, and collaborating with security and IT teams to

Qualifications

• 4–5 years of hands-on penetration testing experience.
• Identify, validate and document security vulnerabilities.
• Experience with OWASP, PTES or NIST testing standards.
• Ability to test across web, mobile, APIs, cloud and networks.

Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Skills

Penetration testing

Offensive security

OWASP/NIST

Security testing tools

Job description

Karachi Based Job & US Time Zone

Job Summary

We are looking for a driven Penetration Tester with 4-5 years of hands-on experience in Offensive Security. In this role, you will identify, validate, and document security vulnerabilities across web and mobile applications, APIs, AD, networks, cloud environments, and infrastructure. The right candidate will bring strong technical expertise in offensive security methodologies, industry frameworks, and security testing tools.

Key Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with standards such as OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Nice to Have

• Hands-on experience in Red Team exercises.
• Active participation in Bug Bounty programs
• Strong industry-recognized certifications such as OSCP, eCPPT, eWPTX, PNP

Be part of the Alykas Team and kick off your tech journey!