Mid-Level Penetration Tester

Job Vacancy: Mid-Level Penetration Tester

RedSecLabs | Islamabad | Hybrid

The Role

We need someone who can actually do the work — mobile apps, APIs, network infrastructure. You'll be running assessments end-to-end, writing reports that clients can act on, and sitting in on debriefs. This is a hands-on role. If you're looking to grow your offensive security skills on real client engagements, this is it.

What You'll Be Doing

- Mobile pentests on Android & iOS — static/dynamic analysis, reverse engineering, SSL unpinning

- API security assessments — REST, GraphQL, SOAP — auth flaws, injection, business logic issues

- Network infrastructure testing — internal/external assessments, firewall reviews, AD/domain security

- Writing clear, actionable reports for technical teams and non-technical stakeholders

- Working with the red team on scoping, methodology, and client debriefs

- Keeping up with new CVEs, attack techniques, and tooling

What We're Looking For

- 2–4 years of real penetration testing experience

Comfortable with OWASP Mobile Top 10 and OWASP API Security Top 10

- Experience bypassing cert pinning, analyzing APKs/IPAs, testing API auth flows

- Solid scripting — Python, Bash, or similar

Strong written and verbal English for client-facing work

Good to Have

Certs: OSCP, eWPTX, eMAPT, CEH, or equivalent

Cloud experience — AWS, Azure, GCP

Background in a consultancy or MSSP setting

What We Offer

Competitive, market-aligned salary

Hybrid setup — Islamabad office

Real-world client work, not lab exercises

Clear growth path within a specialist firm

Send your resumes to: 

📩 hafsa@redseclabs.com