Penetration Tester

Job overview

An on-site Penetration Tester role is open in Dubai, United Arab Emirates for a professional with a strong offensive security background. The position focuses on testing cloud-native systems, mobile and web applications, reviewing source code for security flaws, assessing container and infrastructure security, and evaluating WAF rules. Immediate hiring is being prioritised, and only shortlisted candidates will move forward.

Required background

The role calls for at least 4 years of overall experience in information security, including a minimum of 3 years working as a Security Engineer in cloud-native environments. Candidates should already have hands-on exposure to mobile application testing, web application security, security code review, container and infrastructure assessments, and WAF rule analysis.

Responsibilities

• Run vulnerability assessment and penetration testing activities for web applications, mobile apps on Android and iOS, as well as container and cloud-native infrastructure.
• Carry out code-level security reviews and share practical remediation recommendations with engineering teams.
• Examine container images, orchestration security controls, and infrastructure configurations for weaknesses.
• Analyse WAF configurations, refine rules where needed, and validate the related protections.
• Prepare concise technical documentation and communicate findings to relevant stakeholders.

Additional information

This is a full-time, on-site opening based in Dubai. The employer has indicated that the requirement is immediate and that only shortlisted applicants will be contacted.

Applicants are expected to apply via email.