Penetration Tester

About the role

ExeQut is seeking a hands‑on Penetration Tester to uncover and remediate security weaknesses across web, API, mobile, network, infrastructure, cloud and Active Directory environments for its Saudi Arabian clients. The role focuses on realistic exploitation and clear communication of findings to improve the overall security posture.

Key responsibilities

• Conduct comprehensive penetration testing on web applications, APIs, mobile apps, networks, infrastructure, cloud platforms and Active Directory.
• Identify, safely exploit and assess the business impact of vulnerabilities, including privilege escalation.
• Validate findings using tools such as Burp Suite, Nmap, Metasploit, Nessus, Kali Linux and BloodHound.
• Prepare detailed technical reports with risk ratings, evidence and remediation recommendations.
• Perform remediation retesting and convey results to technical teams.

Required profile

• 3–6+ years of hands‑on penetration testing experience.
• Strong knowledge of OWASP Top 10, networking concepts, Windows/Linux systems, Active Directory, APIs and cloud security.
• Proficiency in scripting with Python, PowerShell or Bash.
• Saudi nationality is mandatory.
• Preferred certifications: OSCP, OSWE, OSEP, CREST, GPEN or CEH.
• Experience in banking, telecom, government or familiarity with Saudi NCA/SAMA frameworks is a plus.

Required skills

• Burp Suite
• Nmap
• Metasploit
• Nessus
• Kali Linux
• BloodHound
• Python
• PowerShell
• Bash
• OWASP Top 10
• Windows and Linux operating systems
• Active Directory
• API security
• Cloud security

What we offer

• Performance‑based compensation structure.
• Bupa medical insurance (Golden Tier).
• Ongoing training and mentorship from experienced leadership.
• Exposure to high‑impact projects with leading Saudi clients.
• A collaborative, growth‑oriented culture.