Senior Penetration Tester – Offensive Security & Risk

PMCL-JAZZ; Karachi Division; On-site; PKR 2,000,000 - 3,500,000; Full time

Job summary

TPL Insurance is seeking a Penetration Tester to conduct authorized security testing across networks, applications, APIs, and cloud environments to identify vulnerabilities before exploitation. The role requires 5–8 years of hands-on experience, OSCP/CREST/ CEH pursued, and strong analytical and communication skills to report findings and drive remediation with IT teams.

Based in Karachi, you will work in a security-driven environment with a focus on governance, risk assessment, and continuous

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Software Engineering.
• 5–8 years of hands‑on experience in penetration testing, vulnerability assessment, offensive security, or cybersecurity in advisory/consultancy.
• OSCP certification is preferred.
• CREST Penetration Testing certification is preferred.
• Certified Ethical Hacker (CEH) certification is preferred.
• CompTIA PenTest+ certification is desirable.
• GIAC Penetration Tester (GPEN) certification is desirable.
• Strong analytical, critical, and investigative thinking, with high attention to detail and problem‑solving abilities.
• Excellent communication skills, demonstrated with integrity and sound judgment.

Responsibilities

• Plan and execute authorized penetration tests across internal and external networks, web apps, APIs, infrastructure, endpoints, and other environments.
• Perform vulnerability assessments and manually validate identified vulnerabilities.
• Identify exploitable vulnerabilities and assess potential business and security impact.
• Conduct authenticated and unauthenticated security testing as applicable.
• Perform security assessments across network, web app, API, wireless, cloud, and infrastructure.
• Prepare detailed penetration testing reports with risk ratings, affected assets, evidence, and remediation recommendations.
• Communicate vulnerabilities and business impact to technical and non‑technical stakeholders.
• Work with IT teams to support remediation and re‑test to confirm closure.
• Identify recurring vulnerabilities and suggest improvements to controls and architecture.
• Keep abreast of emerging threats and continuously enhance testing methodologies.

Skills

Analytical thinking

Problem solving

Communication skills

Attention to detail

Education

Bachelor's degree in Cybersecurity/Information Security/CS/IT/SWE

OSCP

CREST Penetration Testing

CEH

PenTest+

GPEN

Job description

TPL Insurance is seeking a Penetration Tester to conduct authorized security testing across networks, applications, APIs, and cloud environments to identify vulnerabilities before exploitation. The role requires 5–8 years of hands-on experience, OSCP/CREST/ CEH pursued, and strong analytical and communication skills to report findings and drive remediation with IT teams.

Based in Karachi, you will work in a security-driven environment with a focus on governance, risk assessment, and continuous