penetration tester consultant

Confidential Government

<div>
 
 We are seeking a Penetration Tester Consultant to act as an ethical adversary and relentlessly test the organization's defensive barriers.
 
 
 
 
 
 Role Overview: An elite operator role focused on simulating advanced adversary tactics and attack paths before real threat actors can disrupt operations.
 
 
 Core Purpose: To strengthen the security posture by discovering and remediating weaknesses through sophisticated, real-world attack simulations.
 
 
 
 
 
 Key Responsibilities:
 
 <ul>
 <li>
 Execute full-scope adversary simulations and complex penetration testing missions.
 </li>
 <li>
 Research and develop custom exploits and payloads to test the effectiveness of EDR/AV solutions.
 </li>
 <li>
 Provide technical debriefs to help Blue Teams refine detection and response rules.
 </li>
 </ul>
 
 
 
 
 Qualifications:
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Mathematics, or Software Engineering.
 </li>
 <li>
 5+ years of experience in Offensive Security, including 3+ years in multi-vector Red Team operations.
 </li>
 <li>
 Certifications: OSCP, OSEP, or CRT.
 </li>
 <li>
 Competencies: Deep understanding of Windows/Linux internals and expert knowledge of the MITRE ATT&amp;CK framework.
 </li>
 </ul>
 
 
</div>

Penetration Tester Consultant

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. 
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
 
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems. 
 
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Penetration Testing: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li>Adversary Simulation (Red Teaming): Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li>Vulnerability &amp; Application Security Analysis: Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li>Report Development: Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li>Control Evasion &amp; Social Engineering: Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li>Tool Development &amp; Reporting: Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li>Security Awareness: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Innovative Solutions

<div>Company Description
Innovative Solutions (IS) is a premier Cybersecurity company operating across the GCC since 2003, with headquarters in Riyadh and offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We provide comprehensive Cybersecurity Solutions and Services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
Our mission is to &quot;Bring Trust to Cyberspace&quot; and ensure &quot;Your Business, Secured&quot;.
Role Overview
We are seeking a skilled Penetration Tester (RE) to join our cybersecurity team. The successful candidate will be responsible for performing penetration tests and vulnerability assessments on various systems and applications to identify and exploit potential security weaknesses.
Key Responsibilities<ul><li>
Execute detailed penetration testing activities across applications, networks, and systems to discover vulnerabilities.</li><li>
Analyze and exploit identified security risks to assess impact and risk level.</li><li>
Document findings thoroughly and provide clear recommendations to remediate vulnerabilities.</li><li>
Work closely with internal teams to promote the adoption of security best practices and corrective actions.</li><li>
Stay updated on the latest penetration testing tools, techniques, and cybersecurity trends to continuously improve testing methodologies.</li></ul> 

Requirements 
<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
Proven experience in penetration testing or related cybersecurity roles.</li><li>
Strong knowledge of network protocols, systems architecture, and common vulnerabilities.</li><li>
Hands-on experience with penetration testing tools such as Metasploit, Burp Suite, Nessus, and other relevant software.</li><li>
Familiarity with vulnerability assessment techniques and exploit development.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Certifications such as OSCP, CEH, CISSP, or equivalent are highly desirable.</li></ul></div>

Penetration Tester (RE)

Palo Alto Networks

<div><div>Riyadh, Riyadh Region, Saudi Arabia Sales Ref ID: JR-017080</div><div> 
</div><div>Our Mission
At Palo Alto Networks&reg;, we&rsquo;re united by a shared mission&mdash;to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you&rsquo;re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you&rsquo;re in the right place.
Who We Are
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
Job Summary
Your Career
The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will have experience leading Red &amp; Purple team engagements. They will be the client&rsquo;s advocate for cybersecurity best practices related to offensive security and will provide strong recommendations in this domain.
Your Impact<ul><li>
Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools - Red Team experience essential</li><li>
Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel</li><li>
Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients</li><li>
Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements</li><li>
Conducts periodic scans of networks to find and detect vulnerabilities</li><li>
Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)</li><li>
Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks&rsquo; threat hunting tools (and/or client owned hunting instrumentation where applicable)</li><li>
Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders</li><li>
Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach</li><li>
Ability to perform travel requirements as needed to meet business demands
</li></ul>This role can be hired for Riyadh, Remote or Dubai Remote
Qualifications
Your Experience<ul><li>
6+ years of professional experience leading Red &amp; Purple team engagements, Advanced Attack Simulations, OSINT research, social engineering techniques, bespoke security assessments and exploit development,</li><li>
Experience testing a range of technologies (Active Directory, major OSs, cloud environments, IoT / OT) and using a range of security tools and technologies inc AI-enabled to automate and tailor engagements.</li><li>
Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.)</li><li>
Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit</li><li>
Strong knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing</li><li>
Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities</li><li>
Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure)</li><li>
Experience with scripting and editing existing code and programming using one or more of the following - Perl, Python, ruby, bash, C/C++, C#, or Java</li><li>
Experience with security assessment tools, including Nessus, OpenVAS, MobSF Metasploit, Burp Suite Pro, Cobalt Strike, Bloodhound, and Empire</li><li>
Knowledge of application, database, and web server design and implementation</li><li>
Knowledge of network vulnerability assessments, web and cloud application security testing, network penetration testing, red teaming, security operations, or 'hunt'</li><li>
Knowledge of open security testing standards and projects, including OWASP &amp; MITRE ATT&amp;CK</li><li>
Ability to read and use the results of mobile code, malicious code, and anti-virus software</li><li>
Knowledge of computer forensic tools, technologies, and methods</li><li>
Assist in the development of internal infrastructure design for research, development, and testing focused on offensive security</li><li>
Identified ability to grow into a valuable contributor to the practice and, specifically<ul><li>
develop an external presence via public speaking, conferences, and/or publications</li><li>
have credibility, executive presence, and gravitas</li><li>
be able to have a meaningful delivery contribution</li><li>
have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products</li><li>
be collaborative and able to build relationships internally, externally, and across all PANW functions, including the account teams</li></ul></li></ul><ul><li>
Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience to meet job requirements and expectations or equivalent military experience required</li><li>
Hold industry leading certifications from OffSec (OSCE / OSCP / OSWP etc), CREST, GIAC (SANS), and preferably published vulnerabilities, competition winners, conference talks, and published papers or thought leadership</li></ul>
Our Commitment
We&rsquo;re trailblazers that dream big, take risks, and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Is role eligible for Immigration Sponsorship?: Yes</div></div>

Principal Consultant, Red Team

TAWANTECH

<div>About the Role: 
As a Penetration Testing Engineer at TAWANTECH, you will play a critical role in identifying and addressing security vulnerabilities within our technology infrastructure. You will conduct thorough penetration tests, analyze security risks, and collaborate with cross-functional teams to enhance our overall security posture.
Key Responsibilities:<ul><li>
Perform penetration testing on networks, web applications, and systems to uncover potential security threats.</li><li>
Identify vulnerabilities using manual techniques and automated tools.</li><li>
Document findings comprehensively and provide actionable recommendations.</li><li>
Collaborate with development and operations teams to remediate vulnerabilities.</li><li>
Stay current with the latest cybersecurity threats, trends, and mitigation techniques.</li></ul> 

Requirements 
Requirements:<ul><li>
Bachelor's degree in Computer Science, Information Security, or related field.</li><li>
Proven experience (3+ years) in penetration testing and vulnerability assessment.</li><li>
Deep understanding of network protocols, web application security, and common vulnerabilities (e.g., OWASP Top 10).</li><li>
Experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, and others.</li><li>
Strong analytical and problem-solving abilities.</li><li>
Relevant certifications such as OSCP, CEH, or similar are a plus.</li></ul></div>

Penetration Testing Engineer

Fortinet

<div>Responsibilities:
Customer Engagements : Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.
Red Team Operations : Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.
Penetration Testing : Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.
Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.
Documentation and Reporting : Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization&rsquo;s security posture.
Required Skills :
<ul><li>Excellent written and verbal communication skills &ndash; English
</li><li>Experience developing and conducting red team and penetration testing engagements
</li><li>Experience performing application security assessments
</li><li>Public speaking experience at known security conferences is a plus
</li><li>Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
</li><li>Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
</li><li>Development experience using C, C++, .NET, Java, Go
</li><li>Solid understanding of Active Directory and Azure AD
</li><li>Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
</li><li>Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 8 - 10+ years&rsquo; experience in Attack and Penetration testing roles
</li><li>Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
</li></ul>#LI-BG1</div>

Senior Offensive Security Consultant – FortiGuard Proactive Services

Naba Enterprises

Please note that only Saudi Nationals are eligible for this position. Arabic candidates from other nationalities will not be considered.Key Responsibilities:Conduct penetration testing and advanced security assessments. Ensure compliance with cybersecurity regulations such as NCA. Protect systems, applications, and data from cyber threats. Ensure confidentiality, integrity, and availability (CIA) of organizational data. Secure web applications and infrastructure against vulnerabilities. Monitor and respond to security incidents and risks. Collaborate with teams to improve overall security posture.Qualifications &amp; Requirements: Bachelor&rsquo;s degree in computer science or related field. Minimum 7+ years of experience in cybersecurity. eJPT and CCNA certifications are required. Experience in penetration testing and security assessments. Strong knowledge of cybersecurity frameworks, risk management, and compliance. Industry certifications such as CISSP, CISA, or CEH are preferred.Key Skills: Penetration Testing, Cybersecurity Compliance (NCA), Risk Management Threat Analysis &amp; Incident Response, Security Architecture.Pay: ﷼24,000.00 - ﷼27,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>cybersecurity &amp; penetration testing and security assessments: 7 years (Preferred)</li></ul>License/Certification:<ul><li>eJPT and CCNA certifications are required. (Preferred)</li></ul>Work Location: In person

Information Security Engineer L3 ( Saudi National)

Explore 158+ Penetration tester consultant in Riyadh this May. Find roles across top companies and apply now to boost your career.