Junior Penetration Tester

HexVanta (Private) Limited is looking for a motivated Junior Penetration Tester to join our cybersecurity team in Islamabad.
The ideal candidate should have a strong interest in offensive security, a solid understanding of cybersecurity fundamentals, and hands-on exposure to penetration testing tools and methodologies. This role is suitable for fresh graduates and early-career professionals who want to build practical experience by working on real-world security assessments under the guidance of experienced security professionals.
Responsibilities
Assist in conducting web application, API, network, and infrastructure penetration testing.
Identify, validate, and document security vulnerabilities.
Perform reconnaissance, enumeration, vulnerability assessment, and controlled exploitation.
Work with tools such as Burp Suite, Nmap, Metasploit, Wireshark, and other security testing utilities.
Test applications against OWASP Top 10 and common security weaknesses.
Prepare clear and professional vulnerability reports, including technical details, risk impact, and remediation recommendations.
Support senior penetration testers during complex security engagements.
Participate in internal security research, labs, CTFs, and continuous learning activities.
Stay updated with new vulnerabilities, attack techniques, tools, and cybersecurity trends.
Requirements
Good understanding of networking, TCP/IP, HTTP/HTTPS, DNS, and Linux.
Basic knowledge of web application and API security.
Familiarity with vulnerabilities such as SQL Injection, XSS, IDOR, SSRF, authentication issues, and access-control weaknesses.
Hands-on experience with Burp Suite, Nmap, or similar penetration-testing tools.
Basic scripting knowledge in Python, Bash, or PowerShell is an advantage.
Familiarity with Hack The Box, TryHackMe, PortSwigger Academy, CTFs, or personal cybersecurity labs is highly preferred.
Strong analytical and problem-solving skills.
Good written communication and documentation skills.
Strong willingness to learn and develop within offensive security.
Certifications are a plus, but practical skills, curiosity, and a strong security mindset are more important to us.
Fresh graduates and candidates with strong hands-on cybersecurity practice are encouraged to apply.
Job Title: Junior Penetration Tester
Company: HexVanta (Private) Limited
Location: Islamabad
Job Type: Full-Time

Work arrangement
Yes