Senior Penetration Tester

The Senior / Expert Penetration Tester shall conduct advanced offensive security assessments to identify, validate, exploit, and demonstrate security weaknesses across PDA's applications, APIs, mobile applications, networks, servers, cloud environments, databases, identity infrastructure, and security controls. Job ID: PDA-J166.

• Plan and execute manual and automated penetration tests across web/mobile applications, APIs, networks, servers, cloud and identity infrastructure
• Conduct advanced web and API security testing per OWASP Top 10 and OWASP API Security Top 10
• Conduct Android/iOS mobile application security assessments including reverse engineering and runtime protection testing
• Assess network, infrastructure and Active Directory security including privilege escalation and lateral movement
• Design and execute authorized red-team and adversary simulation exercises mapped to MITRE ATT&CK
• Validate scanner findings, develop proof-of-concepts and chain weaknesses into realistic attack paths
• Assess security architecture from an attacker's perspective and recommend improvements
• Develop custom testing scripts and tooling using Python, Bash, PowerShell, JavaScript and SQL
• Provide remediation recommendations and perform retesting
• Prepare detailed technical and executive penetration testing reports

• Bachelor's in Cybersecurity, Bachelor's in Information Security, Bachelor's in Computer Science, Bachelor's in Information Technology, Bachelor's in Computer Engineering, in Cyber Security, Computer Science, Information Technology, Computer Engineering, recognised by HEC
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering or related discipline from HEC-recognized institution
• OSCP certification is mandatory
• OSWE, OSEP, OSED, GXPN, GPEN, CRTO, CREST or GIAC offensive-security certifications preferred
• Hands-on experience with Burp Suite Professional, Nmap, Nessus, Metasploit, BloodHound, MobSF, Frida, Ghidra, Kali Linux and similar tools

• Required experience: At least 6 years
• Minimum 6+ years of hands-on penetration testing/offensive-security experience across multiple security domains, including enterprise penetration testing, web/API and mobile assessments, infrastructure testing, Active Directory assessments, red-team simulations and cloud security assessments
• Experience accepted from: Banking, Payment Systems, Fintech, Telecommunications, Government, Critical Infrastructure

• Paper type: Mcqs

1. Send application via email to jobs@pda.gov.pk
2. Use email subject: Application: Senior Penetration Tester (PDA-J166)
3. Applications reviewed on rolling basis until position is filled

Advertised by

Pakistan Digital Authority (PDA)

Application link

pda.gov.pk

Added to this site

15 Oct 2026

No advertisement file is on record for this vacancy. Confirm every detail on the official site before applying.

• Report an error in this listing
• How we check listings