Opportunity Information
PDA- J166
1
Federal Government Authority
Experienced Professional
On Site
Islamabad
The Role
The Senior Penetration Tester will conduct advanced offensive security assessments across PDA's applications, APIs, mobile apps, networks, cloud, databases and identity infrastructure in Islamabad.
•Plan and execute manual and automated penetration tests across web and mobile applications, APIs, networks, servers, cloud, wireless, databases and identity infrastructure •Test web applications and APIs for access-control, business-logic, injection, SSRF, XSS, CSRF, JWT/ OAuth and other weaknesses per OWASP standards •Conduct Android/ iOS application security assessments including static/ dynamic analysis and reverse engineering •Conduct internal/ external infrastructure and Active Directory assessments, privilege escalation and lateral movement testing •Design and execute authorized red-team exercises and map techniques to MITRE ATT&CK •Validate scanner findings, develop controlled proof-of-concepts and demonstrate realistic attack paths •Assess security architecture from an attacker's perspective and recommend improvements •Develop custom testing scripts and tools using Python, Bash, PowerShell, JavaScript and SQL •Work with development, infrastructure and DevOps teams on remediation and perform retesting •Prepare detailed technical and executive reports
Applicants General Eligibility & Requirements
6+ years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Cyber Security, Information Security, Computer Science, Information Technology, Computer Engineering
Minimum 6 years of hands-on penetration testing/ offensive-security experience across multiple security domains, including enterprise, web/ API, mobile, infrastructure, Active Directory, red-team and cloud assessments Preferred: Experience in banking, payment systems, fintech, telecommunications, government or critical infrastructure; hands-on use of Burp Suite Professional, Nmap, Nessus, Metasploit, BloodHound, Wireshark, MobSF, Frida, Ghidra, Kali Linux and similar tools
Penetration Testing, Python, Burp Suite, Red Teaming, Active Directory Security
•OSCP certification (mandatory) •OSWE, OSEP, OSED, GXPN, GPEN, CRTO, CREST, GIAC offensive-security or equivalent certifications preferred
Application
- Email the application with the subject "Application: Senior Penetration Tester (PDA-J166)"
- Applications received after the deadline will continue to be reviewed on a rolling basis until the position is filled
No application fee
About the Employer
Pakistan Digital Authority (PDA)