Penetration Testing Specialist

About Cipher

Cipher | سايڤر is a Riyadh-based cybersecurity solutions provider focused on simplifying complex cybersecurity challenges. Our dedicated team of Saudi experts develops, customizes, and manages digital security services to ensure our clients experience peace of mind through straightforward and effective protection.

Key Responsibilities

• Collaborate with clients to clearly define penetration testing scope and objectives across various systems, applications, and environments.
• Execute thorough manual penetration tests on web, mobile, API, cloud platforms, and enterprise infrastructures.
• Conduct advanced security assessments including source code analysis, business logic evaluations, and red team exercises to uncover weaknesses.
• Emulate realistic cyber-attacks to test client detection and incident response mechanisms.
• Detect security vulnerabilities, misconfigurations, and gaps both onsite and remotely.
• Produce detailed and clear technical reports, highlighting risks and the business impact of findings.
• Communicate results effectively to technical teams and executive leadership.
• Offer strategic guidance to improve security defenses and minimize the attack surface.
• Keep current with new cybersecurity threats, frameworks such as OWASP and MITRE ATT&CK.

Candidate Requirements

• At least two years of practical experience in penetration testing and cybersecurity operations.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a closely related discipline.
• Preferred certifications include OSCP, eWPTX, CRTP, or their equivalents.
• Proven proficiency in testing security for web, mobile, cloud environments, and infrastructure.
• Expertise in manual vulnerability detection, code review, and adversary emulation techniques.
• Ability to script in Python, PowerShell, and Bash.
• Strong analytical thinking, effective problem-solving abilities, and clear communication skills.
• Capability to translate technical test outcomes into understandable business risks and suggested mitigation strategies.