SENIOR PENETRATION TESTER

Apex Rankers; Islamabad; Presencial; PKR 2.790.000 - 4.464.000; Jornada completa

Descripción de la vacante

Pakistan Digital Authority (PDA) seeks a Senior Penetration Tester to lead offensive security efforts within the Offensive Security & Red Teaming Directorate. The role covers web/mobile/API/web app security testing, AD exploitation, red teaming, PoC creation, and detailed remediation reporting.

Ideal candidates have 5–7 years of offensive testing, OSCP/OSCE or related certs, and experience with MITRE ATT&CK aligned adversary simulations. Posting at Islamabad with open merit allocation.

Formación

• BS/MS in Cybersecurity, Computer Science, Information Security, or Software Engineering with certifications (e.g. OSCP, OSCE, CRTO, GXPN, GPEN).
• Minimum 5 to 7 years offensive penetration testing experience in web/mobile apps, API security, network infra, AD exploitation, Red Team ops, and zero-day research.
• Candidate must lead proactive vulnerability research and offensive cyber assessments for national digital assets.

Responsabilidades

• Full-Scope Offensive Assessments: black-box, grey-box, white-box pentesting on web/apps, APIs, mobile, networks.
• AD exploitation & lateral movement: Kerberoasting, BloodHound path analysis, privilege escalation.
• Red Teaming & adversary emulation aligned to MITRE ATT&CK framework.
• Custom exploit/payload development; EDR evasion; test WAF configurations.
• Cloud security pentesting across AWS/Azure/Kubernetes; report remediation guidance.

Conocimientos

Web & Mobile VAPT

AD Exploitation & Lateral Movement

Red Teaming & Adversary Emulation

EDR Evasion & Exploit Development

Cloud Security & Kubernetes Testing

Educación

BS/MS in Cybersecurity or CS / Information Security / SWE

OSCP / OSCE / CRTO / GXPN / GPEN certifications

Herramientas

Cobalt Strike

Sliver

BloodHound

Mimikatz

WAF

Descripción del empleo

# SENIOR PENETRATION TESTERActive PrepSenior Technical Grade / PPS-08PDA-J0166PID(I) 3116/26Official recruitment notification, eligibility criteria, pay scale (Senior Technical Grade / PPS-08), quota allocation, and written screening test syllabus for **SENIOR PENETRATION TESTER** in the **Offensive Security & Red Teaming Directorate, Pakistan Digital Authority (PDA)**.### Job Specifications & Posting DetailsCase Number**PDA-J0166**Pay Scale / BPS**Senior Technical Grade / PPS-08**Department / Ministry**Offensive Security & Red Teaming Directorate, Pakistan Digital Authority (PDA)**Total Positions**2 Posts**Job Type / Status**Regular / Contractual**Place of Posting**4th Floor, 5-A Constitution Avenue, Islamabad**Age Limit**26 - 40 years**Gender Eligibility**Male / Female** Estimated Base Salary Package**PKR 250,000 - 400,000 / month (Senior Technical Scale)** Credential Category**Bs In Cybersecurity With Oscp / Osce Certification** Experience Required**60 Months** Street & Office Address**4th Floor, 5-A Constitution Avenue, Sector F-5/1** Province / Region**Federal Capital** Postal Code**44000**Posting Date**October 06, 2026**Apply Before**October 21, 2026** Domicile & Regional Quota AllocationOpen Merit (All Pakistan)### Minimum Qualifications & ExperienceEducational QualificationBS / MS in Cybersecurity, Computer Science, Information Security, or Software Engineering with certifications (e.g. OSCP, OSCE, CRTO, GXPN, GPEN).Prescribed Experience & Eligibility CriteriaMinimum 5 to 7 years offensive penetration testing experience in web/mobile applications, API security, network infrastructure, Active Directory exploitation, Red Team operations, and zero-day research.### Job Description & Position OverviewOfficial employment notification has been announced for the offensive security appointment of SENIOR PENETRATION TESTER on Senior Technical Grade / PPS-08 at Offensive Security & Red Teaming Directorate, Pakistan Digital Authority (PDA). This technical billet carries 2 Posts allocated on Open Merit to lead proactive vulnerability research, Red Teaming, and offensive cyber assessments against critical state digital assets.The daily operational duties of SENIOR PENETRATION TESTER include executing comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across national web applications, mobile platforms, cloud architectures, and Active Directory domains, developing custom exploitation proofs-of-concept (PoCs), simulating real-world adversary tactics (TTPs), and authoring executive remediation reports.The candidate selection pathway comprises scrutiny of technical certifications (OSCP/CRTO), followed by a 100-mark written screening examination on offensive security, binary exploitation, and network penetration, culminating in a technical interview.### Key Responsibilities & Professional Duties* ✓Full-Scope Offensive Assessments: Conduct black-box, grey-box, and white-box penetration testing on national web apps, APIs, mobile apps, and network segments.* ✓Active Directory & Internal Exploitation: Execute internal network penetration tests, lateral movement, Kerberoasting, BloodHound path analysis, and privilege escalation.* ✓Red Teaming & Adversary Simulation: Simulate real-world nation-state Advanced Persistent Threat (APT) attack lifecycles mapped to the MITRE ATT&CK framework.* ✓Custom Exploit & Payload Development: Craft custom exploitation scripts, bypass Endpoint Detection and Response (EDR) agents, and test web application firewalls (WAF).* ✓Cloud Security Penetration Testing: Audit and exploit misconfigurations across AWS, Azure, Kubernetes clusters, and containerized microservices architectures.* ✓Comprehensive Technical Reporting: Author detailed vulnerability assessment reports with reproducible proof-of-concepts and actionable technical remediation guidance.### Required Skills & Domain Competencies* Web & Mobile Application VAPT (OWASP Top 10)* Active Directory Exploitation & Lateral Movement (BloodHound, Mimikatz)* Red Teaming & Advanced Adversary Emulation (Cobalt Strike, Sliver)* EDR / Antivirus Evasion & Custom Exploit Development* Cloud Security & Kubernetes Container Penetration Testing* Vulnerability Remediation Architecture & Threat Modeling