Deputy Director (Vulnerability Assessment and Penetration Testing - VAPT)

NADRA requires a Deputy Director (Vulnerability Assessment and Penetration Testing - VAPT) on a contractual basis at Islamabad to lead application, network and mobile penetration testing and secure code review. National Database and Registration Authority (NADRA) has advertised a post of Deputy Director (Vulnerability Assessment and Penetration Testing - VAPT) in Federal. Place of posting: Islamabad, Federal.

Post

Deputy Director (Vulnerability Assessment and Penetration Testing - VAPT)

Department

National Database and Registration Authority (NADRA)

Total posts

1

Employment type

Full Time

Job nature

Contract

Category

Information Technology

Region

Federal

Last date to apply

20 Sept 2026

• Work with application development teams to provide security expertise on systems, encryption, authentication and security-specific code
• Conduct desktop, web and mobile application penetration testing
• Deploy and operate security tools such as Metasploit, Burp Suite, Nessus, Kali Linux, Hydra, Dnspy and MobSF
• Manage assessment of web applications, mobile applications and APIs and review technical reports and recommendations
• Conduct source code reviews and static and dynamic application security testing (SAST, DAST)
• Develop and maintain code review guidelines and standards
• Collaborate with development teams on code quality and secure coding
• Integrate security into the software development lifecycle with infrastructure teams
• Develop and maintain tools and scripts for automated security testing
• Stay updated on programming languages and secure coding techniques

• Bachelor - B.S COMPUTER SCIENCE, Bachelor of Information Technology, Bachelor (Software Engineering), BS (Computer Engineering), BS (Information Security), BS (Cyber Security), MS Computer Science, Master of Information Technology, Master of Science (Computer Engineering), Master of Science in Software Engineering, MS (Information Security), Masters (Cyber Security), in Computer Science, Information Technology, Cyber Security, recognised by HEC
• Bachelors (4 years) in Computer Science/Information Technology/Cyber Security/Information Security or equivalent
• Master's degree in a related field preferred
• Minimum 16 years of HEC verified education
• Degrees must be attested by HEC
• Minimum 6 years post-qualification experience in Application/Network Security and Penetration Testing
• Knowledge of OWASP, SANS and application security standards
• Knowledge of cloud security, containerization and DevSecOps

• Required experience: At least 6 years
• Minimum 6 years post-qualification experience in Application/Network Security and Penetration Testing. Well conversed with Gen AI tools and technologies. CEH and CHFI certifications preferable.

• Male: 18 – 44 years
• Female: 18 – 44 years
• Transgender: 18 – 44 years

Age is normally counted as at the closing date given in the official advertisement. Any relaxation shown above applies only where the advertisement allows it - it is never automatic.

1. Written or screening test
2. Interview
3. Medical examination

• Paper type: Mcqs

Only shortlisted candidates will be called for test/interview. Electronic gadgets such as mobile phones and smart watches are not allowed during test/interview.

• CNIC
• HEC Attested Degrees/Certificates
• Experience Certificates
• Educational Documents
• Medical Fitness Certificate
• Character Certificate
• NOC (for government employees)

1. Sign in with PAKID on the NADRA careers portal
2. Complete the online application form
3. Upload required documents
4. Submit application online before the deadline