Cybersecurity Offensive Specialist

About the role

HALA is seeking a Cybersecurity Offensive Specialist to lead advanced offensive security assessments across its fintech platforms. You will simulate realistic cyber‑attacks, uncover vulnerabilities, and work closely with defensive teams to strengthen detection and response capabilities.

Key responsibilities

• Execute red‑team engagements, adversary simulations, and penetration tests on applications, cloud environments, APIs, and payment/merchant platforms.
• Conduct source‑code reviews and deep‑dive vulnerability analysis to identify high‑impact findings.
• Maintain offensive tooling and lab environments while strictly following rules of engagement to avoid business disruption.
• Document attack pathways and produce clear remediation guidance for product and engineering teams.
• Collaborate with SOC/defense teams to validate detections and improve security controls.
• Ensure all activities, evidence, and reporting align with SAMA CSF and NCA ECC requirements.

Required profile

• 3‑5 years of professional experience in offensive security.
• At least one recognized offensive security certification (e.g., OSCP, CRTO, eCPPT).
• Preferred additional certifications such as OSEP, OSWE, GXPN, GWAPT, GPEN, or CRTP/CRTE.

Required skills

• Penetration testing and red‑team operations.
• Adversary simulation and attack‑path modeling.
• Source‑code review for security flaws.
• Cloud security, API security, and payment platform security.
• Offensive tooling development and lab environment management.

What we offer

• Inclusive, diverse culture with remote, in‑office, and hybrid work options.
• Competitive compensation, potential equity, and an annual learning stipend.
• Opportunities to work with a multinational team across 7 countries in a fast‑growing fintech environment.