Penetration Testing Specialist

About the role

Cipher, a cybersecurity solutions provider based in Riyadh, is looking for a Penetration Testing Specialist to help clients identify and remediate security weaknesses across a variety of environments. The role combines hands‑on testing, threat simulation, and clear communication of risk to both technical teams and business leaders.

Key responsibilities

• Define scope and objectives of penetration tests with clients covering systems, applications, and cloud environments.
• Perform manual penetration testing on web, mobile, APIs, cloud services, and enterprise infrastructure.
• Conduct advanced assessments such as source‑code reviews, business‑logic testing, and red‑team simulations.
• Simulate real‑world attacks to evaluate detection and response capabilities.
• Identify vulnerabilities, misconfigurations, and security gaps both onsite and remotely.
• Produce clear, actionable technical reports that include risk and business impact analysis.
• Present findings to technical teams and executive stakeholders.
• Provide strategic recommendations to improve security posture and reduce attack surface.
• Stay current with emerging threats and frameworks such as OWASP and MITRE ATT&CK.

Required profile

• Minimum 2 + years of hands‑on penetration testing and cybersecurity experience.
• Bachelor’s degree in Computer Science, Cybersecurity, IT, or a related field.
• Relevant certifications (e.g., OSCP, eWPTX, CRTP) are highly preferred.
• Strong analytical, problem‑solving, and communication skills.

Required skills

• Manual vulnerability discovery, source‑code review, and adversary simulation.
• Scripting proficiency in Python, PowerShell, and Bash.
• Familiarity with OWASP and MITRE ATT&CK frameworks.
• Experience testing web, mobile, cloud, and infrastructure environments.