VAPT Principal Consultant

About the role

The VAPT Principal Consultant will lead the Vulnerability Assessment and Penetration Testing practice for a premier Saudi cybersecurity organization. This senior position provides strategic leadership, technical oversight, and executive advisory for critical infrastructure and enterprise clients.

Key responsibilities

• Define and evolve the long‑term VAPT roadmap and governance model aligned with global frameworks (OWASP, PTES, OSSTMM, NIST 800‑115).
• Oversee complex penetration tests across web, mobile, cloud, IoT, OT/ICS, and wireless environments, including adversary emulation and red‑team engagements.
• Validate advanced exploitation and lateral movement scenarios while driving development of proprietary automation tools and threat‑modeling methodologies.
• Translate technical findings into strategic business‑risk insights and present remediation roadmaps to executive leadership.
• Mentor consultants, foster a collaborative offensive‑security culture, and design advanced training pathways.

Required profile

• Saudi national (mandatory).
• 7+ years of hands‑on offensive security, penetration testing, and red‑team experience.
• Proven track record leading large‑scale, multi‑disciplinary engagements for enterprise or critical‑infrastructure clients.
• Deep expertise in modern attack vectors (web, mobile, cloud, IoT, OT, wireless) and vulnerability‑chaining techniques.
• Strong familiarity with regulatory frameworks (NIST, ISO 27001, PCI‑DSS, GDPR) and ability to articulate technical risk in business terms.
• Bachelor’s degree in Cybersecurity, Computer Science, or a related field with excellent C‑suite communication skills.

Required skills

• OSSTMM
• Offensive Security
• Red‑Team Operations
• PCI‑DSS
• Vulnerability Chaining Techniques
• PTES
• NIST & NIST 800‑115
• GDPR
• Vulnerability Assessment
• Penetration Testing
• ISO 27001
• OWASP

What we offer

• Highly prestigious leadership role directly safeguarding the Kingdom’s key digital assets.
• Placement in Riyadh or Dhahran with state‑of‑the‑art facilities.
• Exposure to high‑complexity red‑team operations, cutting‑edge security technology, and executive‑level thought leadership.
• Highly competitive compensation and benefits package.