Consultant – Vulnerability & Penetration Testing (VAPT)

About the role

We are seeking experienced consultants to join Protiviti’s S&P team in the GCC. The role focuses on assessing client security postures, executing vulnerability and penetration testing engagements, and delivering actionable recommendations aligned with business and regulatory goals.

Key responsibilities

• Provide innovation within the Vulnerability and Penetration Testing (VAPT) program, both process‑wise and technology‑wise.
• Serve as a Subject Matter Expert for the Attack & Pen function and conduct authorized attack‑surface reviews, penetration tests, and red‑team assessments.
• Produce clear assessment reports with practical recommendations based on sound risk‑management principles.
• Update standards and procedures to continuously improve security posture and assess the adequacy of policies against best practices.
• Contribute to security‑related information repositories and support business‑development initiatives.
• Mentor junior team members and provide constructive consultation to peer groups.

Required profile

• Bachelor’s degree in Computer Science or equivalent.
• 4–6 years of professional experience in information security, focusing on technical assessments.
• Relevant certifications such as GIAC GPEN, GWAPT, CREST, or OSCE are preferred.
• Strong written and oral communication skills in English and the ability to convey complex concepts to business audiences.

Required skills

• Hands‑on experience with penetration‑testing tools: Nessus, Appscan, Burp Suite, Nipper, Exploit Pack.
• Proficiency with attack frameworks and utilities: Wireshark, Kali Linux, Metasploit.
• Scripting/programming knowledge in Python and shell scripting.
• Deep understanding of OWASP guidelines, CVE databases, and common application/OS exploits.