Penetration Tester - Web, Mobile & Cloud Security

Alykas; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Alykas in Karachi is seeking a driven Penetration Tester to identify and document security vulnerabilities across web, mobile apps, APIs, AD, networks, cloud, and infrastructure.

The role requires 3–5 years hands-on experience in offensive security, with strong knowledge of industry frameworks and testing tools. You will contribute to strengthening the security posture and collaborate with security teams.

Qualifications

• 3–5 years of hands-on experience in Offensive Security.
• Identify, validate, and document security vulnerabilities across web and mobile applications, APIs, AD, networks, cloud environments, and infrastructure.
• Strong technical expertise in offensive security methodologies, industry frameworks, and security testing tools.

Responsibilities

• Run penetration tests across Web and Mobile Application, API, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct penetration testing engagements in line with standards such as OWASP, PTES, NIST.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation, and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Work with SOC and ITSM teams to strengthen the overall security posture.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Tools

OWASP

PTES

NIST

Job description

Alykas in Karachi is seeking a driven Penetration Tester to identify and document security vulnerabilities across web, mobile apps, APIs, AD, networks, cloud, and infrastructure.

The role requires 3–5 years hands-on experience in offensive security, with strong knowledge of industry frameworks and testing tools. You will contribute to strengthening the security posture and collaborate with security teams.