Cybersecurity Assurance Specialist

About the role

The Cybersecurity Assurance Specialist will provide technical assurance for our clients by conducting thorough penetration tests, validating vulnerabilities, verifying remediation, and delivering risk‑based reports. This 13‑month project‑based position is based on‑site in Riyadh and requires a seasoned professional with a strong ethical mindset.

Key responsibilities

• Plan and execute authorized penetration tests across in‑scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack‑surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral‑movement testing.
• Simulate realistic attack scenarios while adhering to rules of engagement and preserving service availability.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and contribute to continuous improvement of security‑assurance processes.

Required profile

• Ethical, discreet, and disciplined in handling sensitive systems and findings.
• Strong analytical curiosity and methodical testing habits.
• Ability to explain complex weaknesses and business impact in clear language.
• Collaborative and constructive when working with system owners on remediation.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 7 years of experience in penetration testing, cybersecurity assurance, or ethical hacking.

Required skills

• Penetration testing and vulnerability discovery.
• Exploitation, privilege escalation, and lateral‑movement techniques.
• Network, web/application, infrastructure, and cloud attack‑surface analysis.
• OWASP testing methodologies and MITRE ATT&CK framework.
• Vulnerability‑rating practices and risk‑based reporting.
• Technical and executive reporting capabilities.