About the Role

Nozom is seeking a Senior Penetration Tester to join its team in Riyadh, Saudi Arabia. This full-time position requires extensive hands-on experience in penetration testing and Red Team operations. The role involves leading advanced security assessments and attack simulations across a wide range of technical environments.

Role Summary

The Senior Penetration Tester will be responsible for identifying, exploiting, and documenting complex security vulnerabilities through comprehensive security assessments and adversary simulation exercises. This position demands a proactive approach to evaluating security postures and providing actionable recommendations to enhance organizational security.

Key Responsibilities

• Lead internal and external network penetration testing engagements.
• Conduct advanced Red Team and adversary simulation exercises based on defined tactics, techniques, and procedures (TTPs).
• Identify, exploit, validate, and thoroughly document complex security vulnerabilities.
• Perform secure code reviews to identify authentication flaws, hardcoded credentials, and insecure logic.
• Evaluate Active Directory attack paths, cloud attack vectors, and privilege escalation risks.

Assessment Domains

The scope of assessments will cover various critical areas, including:

• Networks (internal and external)
• Applications
• Endpoints and general infrastructure
• Wireless environments and internet-connected devices
• Cloud platforms, specifically AWS, Azure, GCP, and Oracle

Required Experience and Professional Conduct

Candidates should possess 5 to 10 years of experience in information security, with a focus on penetration testing and Red Team operations. Beyond technical skills, the role requires strong communication and leadership abilities:

• Prepare executive and technical reports with clear remediation recommendations.
• Present findings to clients and stakeholders effectively.
• Support remediation validation efforts.
• Mentor junior consultants, contributing to team development.

Work Environment

This is a full-time position located in Riyadh, Saudi Arabia, within Nozom's information security team. The role offers an opportunity to work on challenging security projects.