Consultant – Manager| Cyber Operate | Penetration Tester | KSA

Role

Plan and scope engagements

• Agree scope, objectives, rules of engagement, and test windows with system owners, and obtain written authorisation before testing.
• Choose black-box, grey-box, or white-box approaches and determine internal/external and announced/unannounced testing.
• Follow defined methodologies and keep tests safe for live, guest-facing services.

Security testing and exercises

• Test web applications and APIs for authentication, authorization, business logic, injection, session handling, and API security.
• Test iOS and Android applications and their back ends.
• Test internal and external networks, including perimeter exposure, segmentation, lateral movement, and privilege escalation.
• Assess Active Directory and Entra ID attack paths, Kerberos weaknesses, privilege misconfigurations, and credential exposure.
• Test Azure, AWS, and GCP for misconfigurations, excessive permissions, and exposed services.
• Test corporate and guest Wi-Fi and authorised physical access controls.
• Run authorised phishing and pretexting exercises with the Awareness team.
• Plan and lead red team exercises mapped to MITRE ATT&CK and run purple team sessions with the SOC.

Reporting and remediation

• Write risk-rated reports with evidence, attack narratives, practical remediation steps, and a plain-language executive summary.
• Brief technical teams and management on findings and business impact.
• Retest fixes, confirm closure, and pass validated findings to Vulnerability Management and Risk for tracking.
• Build reusable test cases, scripts, and checklists.

Qualifications and experience

• 2–7 total years of experience.
• Bachelor’s degree in cybersecurity, computer science, or a related field, or equivalent practical experience.
• Hands-on penetration testing experience for real organisations, not only labs or CTFs.
• Strong experience with Burp Suite, Nmap, Metasploit, BloodHound, and common post-exploitation frameworks.
• Scripting experience in Python, Bash, or PowerShell.
• Strong report writing in English.
• A recognised hands-on offensive certification, such as OSCP, is required for Mid and Senior levels.

Preferred experience and credentials

• Red team experience with C2 frameworks such as Cobalt Strike, Sliver, or Mythic is preferred.
• Mobile application and cloud penetration testing experience is preferred.
• Exploit development or code review skills are preferred.
• Experience testing hospitality, payments, smart-city, or OT-adjacent environments is preferred.
• Arabic language is preferred.
• At least one of OSCP, CREST CRT/CCT, or GPEN is preferred; OSEP, OSWE, CRTO, GWAPT, eCPPT/eWPT, and PNPT are also valued. CEH is accepted at Junior level only.

Frameworks and standards

• NCA ECC-2:2024 penetration testing, NIST SP 800-115, PTES, OWASP WSTG/ASVS/MASTG, MITRE ATT&CK, and CREST methodology.