Penetration Tester - Web, Mobile & Cloud Security

Alykas; Karachi Division; On-site; PKR 1,800,000 - 3,400,000; Full time

Job summary

Alykas is seeking a driven Penetration Tester with 3-5 years of hands-on experience to identify, validate, and document security vulnerabilities across web, mobile, APIs, AD, networks, cloud, and infrastructure.

You will perform tests per OWASP, PTES, and NIST standards, coordinate with SOC and ITSM teams, support red team exercises, and pursue certifications such as OSCP, eWPTX, and PNP.

Qualifications

• 3–5 years of hands-on experience in offensive security.
• Identify, validate and document security vulnerabilities across web, mobile, APIs, AD, networks, cloud and infrastructure.
• Strong familiarity with OWASP, PTES and NIST testing standards.
• Ability to perform testing and exploitation, with clear reporting and risk assessment.
• Excellent communication to convey findings to technical and non-technical stakeholders.

Responsibilities

• Run penetration tests across Web and Mobile Applications, APIs, AD, Network, Cloud and Infrastructure.
• Perform vulnerability assessments and confirm findings through manual testing and controlled exploitation.
• Conduct engagements in line with OWASP, PTES, NIST standards.
• Handle reconnaissance, enumeration, vulnerability analysis, exploitation and post-exploitation activities.
• Support red team exercises and breach-and-attack simulations where required.
• Collaborate with SOC and ITSM teams to strengthen security posture.

Skills

Penetration testing

Offensive security

Tools

OSCP

eCPPT

eWPTX

PNP

Job description

Alykas is seeking a driven Penetration Tester with 3-5 years of hands-on experience to identify, validate, and document security vulnerabilities across web, mobile, APIs, AD, networks, cloud, and infrastructure.

You will perform tests per OWASP, PTES, and NIST standards, coordinate with SOC and ITSM teams, support red team exercises, and pursue certifications such as OSCP, eWPTX, and PNP.