Cybersecurity Assurance Specialist

About the Role

This opportunity is based onsite in Riyadh, Saudi Arabia, and is for a project-based engagement lasting approximately 13 months involving managed cybersecurity services. The position requires a candidate with a minimum of seven years experience to deliver technical cybersecurity assurance by performing penetration tests, validating vulnerabilities, verifying remediation efforts, and providing reports grounded in risk assessment.

Key Responsibilities

• Design and carry out authorized penetration testing on networks, applications, systems, and cloud platforms within the defined scope.
• Conduct thorough reconnaissance, analyze attack surfaces, identify vulnerabilities, exploit safely, escalate privileges, and test lateral movement capabilities.
• Emulate realistic cyber attack scenarios while strictly adhering to rules of engagement and ensuring system availability and data confidentiality.
• Evaluate findings for technical severity, exploitability, and associated business impacts.
• Generate comprehensive technical reports and executive summaries that include actionable remediation advice.
• Communicate results and suggestions effectively to both technical teams and business stakeholders.
• Perform follow-up testing to verify remediation success and oversee resolution tracking.
• Track vulnerability patterns and actively support the ongoing enhancement of security assurance methodologies.

Qualifications and Experience

• A bachelor’s degree in Computer Science, Information Security, or closely related discipline is required.
• Minimum seven years of hands-on experience specializing in penetration testing, cybersecurity assurance, or ethical hacking.
• In-depth knowledge of network, application, infrastructure, and cloud-based attack vectors.
• Proficient in exploitation techniques, privilege escalation, lateral movement, and confirmation of remediation implementations.
• Familiarity with OWASP testing standards, recognized industry methodologies, vulnerability severity rating, and the MITRE ATT&CK framework.
• Demonstrated skill in producing detailed technical and executive-level reports.

Personal Attributes

• Maintains strict ethical standards, discretion, and discipline when managing sensitive information.
• Presents strong analytical thinking and systematic testing procedures.
• Capable of explaining technical vulnerabilities and their business implications in straightforward language.
• Works collaboratively and positively with stakeholders to support corrective actions.

Preferred Certifications

Certifications such as OSCP, OSEP, CEH, or close equivalents are desirable.

Application Instructions

Applicants should include details on their nationality, years of pertinent experience, current place of residence, notice period availability, and valid professional credentials. Shortlisted candidates may be requested to submit documentation and take part in technical interviews.