Senior Desktop Application Security Tester

Catalyic Security; Lahore; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

Catalyic Security is seeking a Senior Desktop Application Security Tester to lead security assessments of Windows desktop applications for clients. You will identify vulnerabilities through hands-on testing and code review, and report findings with remediation guidance.

You will mentor developers and junior testers, document actionable results, and help teams adopt secure coding practices across projects.

Qualifications

• 5+ years of experience in application security testing.
• Strong hands-on experience with Windows internals and desktop security.
• Proficiency in reverse engineering and binary analysis.
• Solid understanding of secure code review across desktop languages (C, C++, C#/.NET).
• Strong report writing and technical communication skills.

Responsibilities

• Perform end-to-end security testing of Windows desktop applications.
• Conduct source code reviews to identify security flaws and insecure coding practices.
• Carry out vulnerability analysis, including memory corruption and binary-level issues, authentication weaknesses, insecure data storage, IPC, DLL hijacking, and privilege escalation paths.
• Document findings in clear, actionable technical reports.
• Recommend practical fixes and validate remediation.
• Support development teams in adopting secure coding practices.
• Guide and mentor junior testers on methodology and tooling.

Skills

Security testing

Windows internals

Reverse engineering

Binary analysis

Secure code review

Technical communication

Time management

Education

Bachelor's degree in Cyber Security, Computer Science, IT, or a related field

Tools

Debugging tools

Binary analysis tools

Reverse engineering tools

Job description

The Senior Desktop Application Security Tester will lead security assessments of Windows desktop applications for Catalyic Security's clients. You will identify vulnerabilities through hands-on testing and code review, report findings with clear remediation guidance, and act as a technical mentor to developers and junior testers.

Key Responsibilities

• Perform end-to-end security testing of Windows desktop applications
• Conduct source code reviews to identify security flaws and insecure coding practices
• Carry out vulnerability analysis, including:
  • Memory corruption and binary-level issues
  • Authentication and authorization weaknesses
  • Insecure data storage and inter-process communication
  • DLL hijacking and privilege escalation paths
• Document findings in clear, actionable technical reports
• Recommend practical fixes and validate remediation
• Support development teams in adopting secure coding practices
• Guide and mentor junior testers on methodology and tooling

Required Skills & Experience

• 5+ years of experience in application security testing
• Strong hands-on experience with Windows internals and desktop application security
• Proficiency in reverse engineering, debugging, and binary analysis tools
• Solid understanding of secure code review across common desktop languages (C, C++, C#/.NET)
• Strong report writing and technical communication skills
• Ability to work independently and manage multiple assessments

Education & Certifications (Preferred)

• Bachelor's degree in Cyber Security, Computer Science, IT, or a related field
• Relevant certifications preferred:
  • OSED (Offensive Security Exploit Developer)
  • OSCP / OSCP+ with Windows security experience