Penetration Tester

About the role

We are expanding our cybersecurity team and need a motivated Penetration Tester who thrives on uncovering hidden vulnerabilities across code, applications, and enterprise environments. If you enjoy breaking systems to make them stronger, this role is for you.

Key responsibilities

• Perform end‑to‑end penetration testing of web applications, mobile apps, and infrastructure/network environments.
• Execute Active Directory attacks, including enumeration, privilege escalation, lateral movement, and domain compromise.
• Conduct internal and external security assessments, identify vulnerabilities, and exploit them where safe.
• Analyze findings, assess business risk, and produce clear, actionable technical reports for engineering and development teams.
• Stay current with emerging threats, zero‑days, and offensive security techniques.

Required profile

• Saudi national (role open to Saudi candidates only).
• 1–2 years of hands‑on penetration testing, ethical hacking, or security research experience.
• Proven experience testing web, mobile, and infrastructure targets.
• Hands‑on experience with Active Directory attacks in real or lab settings.
• Strong communication skills to convey complex risks to technical and non‑technical audiences.

Required skills

• Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, BloodHound, Impacket.
• Deep understanding of the OWASP Top 10, network protocols, and OS internals (Windows/Linux).
• Offensive security certifications such as OSCP, OSEP, eWPTX, eMAPT (or equivalent).

What we offer

• Opportunity to work for a leading Saudi cybersecurity firm serving major enterprise clients.
• Exposure to real‑world security challenges across diverse industries.
• Support for continuous learning, certifications, and research.