About the Role

Managed Services is seeking a Penetration Tester to join their team in Riyadh. This full-time role involves conducting comprehensive security assessments, identifying and validating vulnerabilities, and providing practical remediation recommendations across various client environments. The ideal candidate will possess strong offensive-security skills and practical testing experience, coupled with the ability to prepare clear and professional technical reports.

Key Responsibilities

• Conduct penetration testing across web applications, APIs, networks, infrastructure, and cloud environments.
• Perform manual and automated vulnerability assessments.
• Safely exploit identified vulnerabilities to assess their technical and business impact.
• Test authentication, authorization, session management, and application logic.
• Participate in red-team and adversary-simulation activities when required.
• Conduct source-code security reviews and identify insecure coding practices.
• Document findings with supporting evidence, risk ratings, and remediation recommendations.
• Present and explain technical findings to clients and internal stakeholders.
• Conduct retesting to verify that vulnerabilities have been properly remediated.
• Stay updated on emerging vulnerabilities, exploitation techniques, and offensive-security tools.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field.
• 2–3 years of practical experience in penetration testing or offensive security.
• Hands-on experience in web application and network penetration testing.

Technical Skills and Knowledge

• Strong knowledge of vulnerability assessment and exploitation techniques.
• Good understanding of network protocols, including TCP/IP, DNS, and HTTP.
• Strong working knowledge of Linux and Windows environments.
• Strong understanding of web technologies, APIs, authentication mechanisms, and the OWASP Top 10.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Nessus.
• Scripting skills in Python, Bash, PowerShell, Ruby, or a similar language.
• Strong technical-reporting and communication skills.

Preferred Qualifications

Candidates with the following experience or certifications will be at an advantage:

• Experience in cloud security assessments, red-team operations, source-code security reviews, or client-facing penetration-testing engagements.
• One or more of the following certifications: Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), GIAC Penetration Tester (GPEN), Offensive Security Experienced Penetration Tester (OSEP), Certified Red Team Professional (CRTP), or Certified Red Team Operator (CRTO).

Work Environment

This is a full-time, on-site position based in Riyadh.