Senior Offensive Security Penetration Tester

Apex Rankers; Islamabad; On-site; PKR 2,790,000 - 4,464,000; Full time

Job summary

Pakistan Digital Authority (PDA) seeks a Senior Penetration Tester to lead offensive security efforts within the Offensive Security & Red Teaming Directorate. The role covers web/mobile/API/web app security testing, AD exploitation, red teaming, PoC creation, and detailed remediation reporting.

Ideal candidates have 5–7 years of offensive testing, OSCP/OSCE or related certs, and experience with MITRE ATT&CK aligned adversary simulations. Posting at Islamabad with open merit allocation.

Qualifications

• BS/MS in Cybersecurity, Computer Science, Information Security, or Software Engineering with certifications (e.g. OSCP, OSCE, CRTO, GXPN, GPEN).
• Minimum 5 to 7 years offensive penetration testing experience in web/mobile apps, API security, network infra, AD exploitation, Red Team ops, and zero-day research.
• Candidate must lead proactive vulnerability research and offensive cyber assessments for national digital assets.

Responsibilities

• Full-Scope Offensive Assessments: black-box, grey-box, white-box pentesting on web/apps, APIs, mobile, networks.
• AD exploitation & lateral movement: Kerberoasting, BloodHound path analysis, privilege escalation.
• Red Teaming & adversary emulation aligned to MITRE ATT&CK framework.
• Custom exploit/payload development; EDR evasion; test WAF configurations.
• Cloud security pentesting across AWS/Azure/Kubernetes; report remediation guidance.

Skills

Web & Mobile VAPT

AD Exploitation & Lateral Movement

Red Teaming & Adversary Emulation

EDR Evasion & Exploit Development

Cloud Security & Kubernetes Testing

Education

BS/MS in Cybersecurity or CS / Information Security / SWE

OSCP / OSCE / CRTO / GXPN / GPEN certifications

Tools

Cobalt Strike

Sliver

BloodHound

Mimikatz

WAF

Job description

Pakistan Digital Authority (PDA) seeks a Senior Penetration Tester to lead offensive security efforts within the Offensive Security & Red Teaming Directorate. The role covers web/mobile/API/web app security testing, AD exploitation, red teaming, PoC creation, and detailed remediation reporting.

Ideal candidates have 5–7 years of offensive testing, OSCP/OSCE or related certs, and experience with MITRE ATT&CK aligned adversary simulations. Posting at Islamabad with open merit allocation.