Cybersecurity Assurance Specialist (Penetration Testing)

About the role

CCDS is hiring a Cybersecurity Assurance Specialist for an on-site, project-based engagement in Riyadh, Saudi Arabia. The role provides technical cybersecurity assurance through penetration testing, vulnerability validation, remediation verification and risk-based reporting. The contract is a 13-month managed cybersecurity services engagement, and the minimum experience required is 7+ years.

Key responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation and lateral-movement testing.
• Simulate realistic attack scenarios within approved rules of engagement, protecting service availability and data.
• Assess findings by technical severity, exploitability and business impact.
• Prepare technical reports and executive summaries with practical remediation guidance, and present them to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and help improve security-assurance processes.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• At least 7 years of experience in penetration testing, cybersecurity assurance or ethical hacking.
• Ethical, discreet and disciplined handling of sensitive systems and findings.
• Able to explain complex weaknesses and their business impact clearly, and to collaborate constructively with system owners on remediation.

Required skills

• Strong understanding of network, web/application, infrastructure and cloud attack surfaces.
• Hands-on exploitation, privilege escalation, lateral movement and remediation validation.
• Knowledge of OWASP testing methodologies, industry testing standards, vulnerability-rating practices and MITRE ATT&CK.
• Strong technical and executive reporting capability.
• Preferred certifications: OSCP, OSEP, CEH or equivalent.