Penetration Tester

Pluto IT Solutions INC; Lahore; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

Pluto IT Solutions INC, a Canada-based cybersecurity company with a Lahore team, seeks a Penetration Tester to identify security weaknesses across client environments. The role emphasizes manual testing, practical risk validation, and formal methodologies such as OWASP, PTES, NIST, and MITRE ATT&CK.

Responsibilities include planning and executing tests across web, API, mobile, network, and cloud environments; performing recon, exploitation, and post‑exploitation analysis; and delivering clear,

Qualifications

• Hands-on penetration testing across web apps, APIs, networks, cloud, or mobile.
• Solid understanding of OWASP Top 10 and common auth flaws.
• Reconnaissance, vulnerability analysis, exploitation, privilege escalation, attack-path validation.
• Knowledge of Linux/Windows, TCP/IP, DNS, HTTP, scripting; familiarity with testing tools.
• Familiarity with PTES, NIST, MITRE ATT&CK, CVSS; strong written and verbal communication.

Responsibilities

• Plan and execute penetration tests for web apps, APIs, mobile apps, networks, and cloud.
• Perform recon, vulnerability discovery, exploitation and post-exploitation activities.
• Combine manual techniques with tools to reduce false positives and show business impact.
• Document findings with evidence, risk ratings, remediation guidance, and executive summaries.
• Collaborate with consultants and clients to validate findings and explain attack paths.

Skills

Penetration testing

Technical writing

Client communication

Analytical thinking

Tools

Burp Suite

Nmap

Metasploit

Vulnerability scanners

Job description

Job Description: Role Overview

Pluto IT Solutions INC is a Canada-based cybersecurity company delivering professional security testing and consulting services to organizations across multiple industries. From our Lahore team, we support web application, API, mobile, network, and cloud security assessments, vulnerability assessments, red-team engagements, security monitoring, and compliance initiatives.

We are seeking a Penetration Tester to identify, validate, and clearly communicate security weaknesses across client environments. The role emphasizes manual testing, practical risk validation, and recognized methodologies including OWASP, PTES, NIST, and MITRE ATT&CK.

Responsibilities

• Plan and execute penetration tests for web applications, APIs, mobile applications, networks, cloud environments, and supporting infrastructure.
• Conduct reconnaissance, vulnerability discovery, exploitation, privilege escalation, lateral movement, and post-exploitation analysis within approved scopes.
• Use manual techniques alongside appropriate testing tools to reduce false positives and demonstrate realistic business impact.
• Document technical findings with reproducible evidence, risk ratings, remediation guidance, and clear executive summaries.
• Collaborate with security consultants and clients to validate findings, explain attack paths, and support

Job Specification

• Hands-on penetration testing experience across web applications, APIs, networks, cloud platforms, or mobile applications.
• Strong understanding of OWASP Top 10, common authentication and authorization flaws, injection, business logic issues, and secure development practices.
• Ability to perform reconnaissance, vulnerability analysis, exploitation, privilege escalation, and attack-path validation.
• Practical knowledge of Linux, Windows, TCP/IP, DNS, HTTP, scripting, and security testing tools.
• Familiarity with Burp Suite, Nmap, Metasploit, vulnerability scanners, and evidence collection workflows.
• Working knowledge of PTES, NIST, MITRE ATT&CK, CVSS, and professional penetration-testing reporting.
• Clear technical writing, client communication, analytical thinking, and disciplined handling of sensitive information.