Penetration Tester

About the role

The Penetration Tester will conduct authorized penetration testing and security assessments to identify vulnerabilities before they can be exploited. This role supports TPL Insurance’s security posture across internal and external environments.

Key responsibilities

• Plan and execute penetration tests on networks, web applications, APIs, cloud, wireless, and endpoints.
• Perform vulnerability assessments, manually validate findings, and simulate realistic attack scenarios.
• Document testing activities, produce detailed reports with risk ratings, remediation recommendations, and validate fixes.
• Identify opportunities for privilege escalation, lateral movement, and data exposure during assessments.
• Support security improvement initiatives, secure design reviews, and internal audits.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• 5‑8 years of hands‑on penetration testing or offensive security experience, preferably in advisory/consultancy firms.
• Strong analytical, investigative thinking and excellent communication skills.

Required skills

• Offensive Security Certified Professional (OSCP) – preferred.
• CREST Certified Penetration Tester – preferred.
• Certified Ethical Hacker (CEH) – preferred.
• CompTIA PenTest+ – desirable.
• GIAC Penetration Tester (GPEN) – desirable.

What we offer

• Opportunity to work for an AA‑rated insurer and leading InsurTech company in Pakistan.
• Agile, collaborative culture encouraging ownership and innovation.