Penetration Tester

Alykas; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Alykas in Karachi is seeking a driven Penetration Tester to identify and document security vulnerabilities across web, mobile apps, APIs, AD, networks, cloud, and infrastructure.

The role requires 3–5 years hands-on experience in offensive security, with strong knowledge of industry frameworks and testing tools. You will contribute to strengthening the security posture and collaborate with security teams.

Qualifications

• 3–5 years of hands-on experience in Offensive Security.
• Identify, validate, and document security vulnerabilities across web and mobile applications, APIs, AD, networks, cloud environments, and infrastructure.
• Strong technical expertise in offensive security methodologies, industry frameworks, and security testing tools.

Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with standards such as OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Tools

OWASP

PTES

NIST

Job description

Karachi Based Job

Job Summary

We are looking for a driven Penetration Tester with 3-5 years of hands-on experience in Offensive Security. In this role, you will identify, validate, and document security vulnerabilities across web and mobile applications, APIs, AD, networks, cloud environments, and infrastructure. The right candidate will bring strong technical expertise in offensive security methodologies, industry frameworks, and security testing tools.

Key Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with standards such as OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Nice to Have

• Hands-on experience in Red Team exercises.
• Active participation in Bug Bounty programs
• Strong industry-recognized certifications such as OSCP, eCPPT, eWPTX, PNP

Be part of the Alykas Team and kick off your tech journey!!