Senior Penetration Testing Specialist

Role Overview

We are looking for a dedicated and experienced Senior Penetration Testing Specialist to join our cybersecurity team in Jeddah, Saudi Arabia. The primary objective is to analyze and identify vulnerabilities within our systems and networks by emulating attacker methodologies and recommending appropriate security measures.

Key Responsibilities

• Detect potential attack strategies to exploit weaknesses in system and network infrastructures.
• Execute social engineering techniques to discover security loopholes.
• Perform detailed technical analysis and open-source research to map out network structures and usage patterns.
• Conduct thorough code evaluations using specialized security scanning and testing tools.
• Propose security enhancements to mitigate risks identified in testing phases.
• Review and evaluate defensive mechanisms and carry out penetration tests on infrastructure according to organizational security policies.
• Perform comprehensive risk and vulnerability assessments covering both technical and non-technical aspects.
• Maintain and update a deployable audit toolkit for cyber defense based on industry best standards.
• Test for security weaknesses in web, client, and standard applications.
• Conduct assessments of physical security measures protecting servers, systems, and network devices.
• Document findings from penetration tests and vulnerability assessments, including risk ratings, mitigation strategies, and reproducible test procedures.
• Communicate the business impact of security vulnerabilities to encourage timely remediation efforts.
• Present detailed test outcomes, risk evaluations, and conclusions to audiences with varying technical expertise.
• Develop realistic simulated attacks that demonstrate potential effects on the business and users.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related fields.
• Preferred certifications include OSCP, OSWP, OSEP, GPEN, GWAPT, GMOB, GXPN, GWEB, GCPN, eWAPTX, or eCTHP.
• At least 5 to 7 years of relevant professional experience in penetration testing or cybersecurity.

Technical Expertise

• Expertise in conducting vulnerability scans and analyzing their outcomes.
• Intermediate skills in penetration testing aligned with company standards and best practices.
• Advanced understanding of organizational threat landscapes.
• Expert analysis of vulnerability and configuration data for cybersecurity faults.
• High competency in simulating attacker behaviors.
• Intermediate knowledge in applying adversary Tactics, Techniques, and Procedures (TTPs).