Cybersecurity Consultant TVA

About the Role

Join a leading global organization recognized for its technical excellence and innovation. This role offers you the chance to contribute to enhancing client security by performing in-depth vulnerability analyses, penetration tests, and security assessments. You will collaborate with diverse teams including customers, infrastructure specialists, and security stakeholders to identify risks, validate findings, and recommend actionable solutions to bolster security and compliance with standards.

Key Responsibilities

• Execute vulnerability assessments and penetration testing across networks, infrastructure, servers, applications, and cloud platforms.
• Conduct authorized internal and external network penetration tests.
• Perform security evaluations on web applications and APIs using industry-standard methodologies.
• Undertake authenticated and unauthenticated vulnerability scans utilizing approved commercial and open-source tools.
• Confirm vulnerabilities through manual validation, eliminating false positives before documentation.
• Carry out controlled exploits to verify impact while minimizing operational disruption.
• Assess security weaknesses in environments including Windows, Linux, Active Directory, databases, and network devices.
• Evaluate vulnerability severity considering exploitability, asset importance, technical risk, and business effect.
• Apply risk ratings using CVSS and client-specific classification systems.
• Compile detailed technical reports, executive summaries, and remediation advice.
• Present findings and risk reduction strategies to both technical and business audiences.
• Lead remediation workshops and offer technical mentorship to client teams.
• Validate remediation efforts through follow-up testing.
• Maintain thorough evidence and documentation such as test logs and tool outputs.
• Assist in assessment planning, defining scope, methodologies, and engagement rules.
• Ensure compliance with authorization protocols and security testing standards.
• Support consulting services related to system hardening, vulnerability fixes, application security, and infrastructure protection.
• Perform security assessments aligned with frameworks like NCA ECC, SAMA CSF, ISO 27001, CIS Controls, and PCI DSS.
• Contribute to enhancing internal testing approaches, report templates, and knowledge management.
• Assist in presales activities by offering technical insights for proposals and effort estimation.
• Undertake any additional cybersecurity consulting, vulnerability management, or penetration testing tasks as needed.

Required Qualifications and Skills

• Thorough knowledge of vulnerability assessment and penetration testing approaches.
• Hands-on experience testing networks, infrastructure, web applications, and APIs.
• Solid understanding of TCP/IP networking fundamentals including routing, switching, DNS, HTTP/HTTPS, VPNs, firewalls, and enterprise networking.
• Familiarity with Windows, Linux systems, and Active Directory environments.
• Expertise in common attack vectors such as privilege escalation, credential compromise, lateral movement, and Active Directory exploitation.
• Knowledge of OWASP Top 10, OWASP API Security, CVSS, CWE, and MITRE ATT&CK frameworks.
• Proficient in using security tools such as Burp Suite, Nmap, Nessus, Qualys, Rapid7, Metasploit, Wireshark, OWASP ZAP, and Kali Linux.
• Capability to manually verify vulnerabilities and differentiate true positives from false alerts.
• Understanding of security technologies like WAF, IDS/IPS, NAC, EDR, SIEM, and secure remote access solutions.
• Basic scripting in Python, PowerShell, Bash, or related languages.
• Strong analytical thinking with the ability to adopt the attacker's perspective.
• Excellent report writing, evidence collection, and presentation skills.
• Effective communication to relay technical vulnerabilities and risks to varied audiences.
• Ability to manage several client projects independently while ensuring high-quality outputs.
• Committed to professional ethics and confidentiality.

Academic and Professional Credentials

• Bachelor’s degree in Cybersecurity, Computer Science, IT, Computer Engineering, or related technical fields.
• Equivalent extensive hands-on experience may be accepted.
• Preferred certifications: OSCP, CREST CRT, GPEN, PNPT, eCPPT, CompTIA PenTest+, Burp Suite Certified Practitioner, CEH or CEH Practical.

Experience Requirements

• 5 to 7 years of experience in cybersecurity roles focusing on vulnerability assessment, penetration testing, or consulting.
• At least 3 years of recent practical experience performing vulnerability assessments and penetration tests.
• Proven track record conducting both internal and external network penetration tests.
• Experience with web application and API security evaluations.
• Familiarity with vulnerability management tools like Tenable, Qualys, or Rapid7.
• Proficient with Burp Suite, Metasploit, Nmap, Kali Linux, and Wireshark.
• Skilled at validating vulnerabilities, exploiting weaknesses safely, verifying remediation, and retesting.
• Competent in producing technical security reports and delivering presentations to clients.
• Experience assessing security in Windows, Linux, Active Directory, and network infrastructures.
• Exposure to cybersecurity consulting or professional services customer engagements.
• Strong preference for experience in Active Directory security testing.
• Additional beneficial experience: cloud security, wireless, mobile applications, container security, or red teaming.
• Awareness of security frameworks such as NCA ECC, SAMA CSF, ISO 27001, PCI DSS is advantageous.
• Strong communication skills in English; knowledge of Arabic is a plus.

Work Location

This position requires working on-site in Riyadh.

Additional Information

NTT DATA is a global leader in technology services, dedicated to client success and societal impact through innovation. The company embraces diversity, equal opportunity, and professionalism. Beware of third parties posing as recruiters; genuine communications will originate from official company email addresses.