Penetration Tester

About the role

Managed.sa is seeking a hands‑on Penetration Tester to conduct comprehensive security assessments for client environments. The role involves identifying and validating vulnerabilities, exploiting them safely, and delivering clear remediation recommendations to protect business assets.

Key responsibilities

• Perform penetration testing on web applications, APIs, networks, infrastructure and cloud platforms.
• Execute manual and automated vulnerability assessments and safely exploit findings to determine impact.
• Test authentication, authorization, session management and application logic.
• Participate in red‑team and adversary‑simulation exercises as needed.
• Conduct source‑code security reviews and highlight insecure coding practices.
• Document findings with evidence, risk ratings and remediation guidance.
• Present technical results to clients and internal stakeholders.
• Retest to confirm that vulnerabilities have been properly mitigated.
• Stay current on emerging threats, exploitation techniques and offensive‑security tools.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security or a related field.
• 2‑3 years of practical penetration‑testing or offensive‑security experience.
• Hands‑on experience with web‑application and network testing.
• Ability to work full‑time on‑site in Riyadh.
• Strong technical reporting and communication skills.

Required skills

• Burp Suite
• Metasploit
• Nmap
• Wireshark
• Nessus
• Python
• Bash
• PowerShell
• Ruby
• Linux
• Windows
• TCP/IP
• DNS
• HTTP
• OWASP Top 10
• Web application security testing
• API security testing
• Network security testing
• Cloud security assessments
• Source‑code review