Penetration Testing Senior Specialist

About the role

Sirar by stc is seeking a senior specialist to lead penetration testing and vulnerability assessment activities across its client portfolio. The role involves identifying security gaps, simulating attacks, and delivering actionable recommendations to protect digital environments.

Key responsibilities

• Report penetration testing and vulnerability assessment findings, including risk levels and mitigation steps.
• Identify attacker methods and simulate malicious social‑engineering techniques.
• Gather network topology information through technical analysis and open‑source research.
• Use security testing and code‑scanning tools to conduct code reviews.
• Perform authorized penetration testing of infrastructure, web applications, client applications, and standard applications.
• Conduct physical security assessments of servers, systems, and network devices.
• Explain business impact of identified vulnerabilities to both technical and non‑technical audiences.
• Design complex simulated attacks that reflect real‑world business impact.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field (Master’s preferred).
• 3‑5 years of relevant experience in penetration testing or vulnerability assessment.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor are preferred.

Required skills

• Penetration testing and vulnerability assessment techniques.
• Use of security testing and code‑scanning tools.
• Web application and network security testing.
• Open‑source intelligence (OSINT) gathering.
• Physical security assessment of hardware assets.
• Social‑engineering simulation.