Penetration Tester

Role Overview

Key Responsibilities

• Conduct penetration testing and vulnerability assessments across networks, systems, web applications, APIs, and infrastructure.
• Perform manual and automated security testing to identify vulnerabilities and potential attack paths.
• Validate and safely demonstrate identified security weaknesses.
• Conduct reconnaissance, enumeration, exploitation, and post-exploitation activities within authorized testing environments.
• Prepare detailed penetration testing reports including findings, risk ratings, evidence, and remediation recommendations.
• Work closely with security, infrastructure, development, and IT teams to communicate vulnerabilities and remediation.
• Perform security testing in accordance with established methodologies and industry best practices.
• Support security assessments, threat modeling, and vulnerability management activities as required.
• Maintain accurate documentation of testing activities, findings, and remediation status.
• Stay current with emerging vulnerabilities, attack techniques, tools, and cybersecurity trends.

Requirements

• Saudi Arabian nationality.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• At least 1-2 years of experience in penetration testing, ethical hacking, or offensive security.
• Strong knowledge of network, web application, API, and infrastructure security.
• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Kali Linux, or equivalent.
• Good understanding of OWASP Top 10 and common web application vulnerabilities.
• Knowledge of TCP/IP, networking, Linux, Windows, Active Directory, and common security technologies.
• Ability to perform vulnerability validation and controlled exploitation.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Ability to work onsite in Riyadh for the duration of the contract.