Penetration Tester

About the role

TPL Insurance is hiring a Penetration Tester in Karachi (on-site). The role carries out authorized penetration testing and security assessments to find vulnerabilities before they can be exploited by attackers. The position is at grade M I - SM II.

Key responsibilities

• Plan and run authorized penetration tests on internal and external networks, web apps, APIs, infrastructure, endpoints and other environments
• Perform vulnerability assessments and manually validate findings, then assess their business and security impact
• Run authenticated and unauthenticated tests, including network, web, API, wireless, cloud and infrastructure assessments
• Simulate realistic attacks to test prevention, detection and response, and look for privilege escalation, lateral movement and data exposure
• Document testing activities and findings, and prepare detailed reports with risk ratings, affected assets and remediation recommendations
• Communicate technical issues to technical and non-technical stakeholders, prioritize findings and work with IT teams to fix them
• Validate remediation through re-testing and track vulnerability status
• Identify recurring weaknesses, recommend security improvements, support secure design reviews and take part in vulnerability management and security audits
• Ensure all testing is authorized, scoped and compliant with policy and regulations, and keep information confidential

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology or Software Engineering
• At least 5-8 years of hands-on experience in penetration testing, vulnerability assessment, offensive security or cybersecurity, preferably in advisory or consultancy firms
• Strong analytical, investigative and problem-solving skills, with excellent communication and ethical judgment

Required skills

• Preferred: OSCP, CREST Penetration Testing, CEH, CompTIA PenTest+, GIAC GPEN certifications
• Knowledge of penetration testing methodologies and industry best practices

The application deadline is 18 September 2026; candidates apply through the recruitment platform listed in the original posting.