• Strong theoretical and practical knowledge in performing manual or automated network security assessments using open-source and/or commercial security tools on various operating systems (Windows, Linux atleast), applications, network and security infrastructure devices.
• Excellent up-to-date technical and hands-on knowledge, experience in current attack methods, penetration testing methods, and hacking tools; especially for web applications, required.  
• Motivated with a desire to learn and to share knowledge.  
• Good working knowledge of common software vulnerabilities, such as OWASP Top 10 and CWE/SANS top 25.  
• Hands-on experience in Kali Linux, Metasploit, Nmap, Burp, Paros, Nessus and other relevant tools.  
• Programming experience in Python, PHP, Perl, Ruby, .NET or other interpreted or compiled languages will be preferred.   
• Experience with reverse engineering, exploit development, mobile, and SCADA/industrial control systems are a plus.  
• Flexibility and adaptability to work in a growing and dynamic team with good interpersonal communication skills.   

Preferably willing to relocate to Islamabad/Rawalpindi (if otherwise).

 Performing network-based security assessments (including wireless, where applicable).  

 (a) External public networks

 (b) Third party private networks

 (c) Internal private network

2. Carrying out security assessments on web applications. 

3. Carrying out security assessments on software applications. 

4. Providing advice (wherever necessary) for proper implementation of technical security controls. 

5. Developing testing scripts and procedures

Other security-related projects that may be assigned according to skills.