penetration tester

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

International Turnkey Systems - ITS

<div>
 <p>
  For a
  <strong>
   well-known Islamic Bank in Kuwait
  </strong>
  , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 </p>
 <p>
  Candidate is expected to have experience in assessing
  <strong>
   Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
  </strong>
  .
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   AI / LLM penetration Testing &amp; Red Teaming
  </strong>
 </p>
 <ul>
  <li>
   Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
  </li>
  <li>
   Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
  </li>
  <li>
   Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
  </li>
  <li>
   Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
  </li>
 </ul>
 <p>
  <strong>
   Automation &amp; Tooling
  </strong>
 </p>
 <ul>
  <li>
   Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
  </li>
  <li>
   Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
  </li>
  <li>
   Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
  </li>
 </ul>
 <p>
  <strong>
   Secure code review &amp; AppSec
  </strong>
 </p>
 <ul>
  <li>
   Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
  </li>
  <li>
   Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
  </li>
 </ul>
 <p>
  <strong>
   Traditional PT
  </strong>
 </p>
 <ul>
  <li>
   Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
  </li>
  <li>
   Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education and Qualification
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
  </li>
  <li>
   3&ndash;7 years in penetration testing / application security / red teaming.
  </li>
  <li>
   Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
  </li>
  <li>
   Strong hands-on Python for security automation and test harness development.
  </li>
  <li>
   Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
  </li>
  <li>
   Strong report writing, clear communication, ability to work with developers on remediation.
  </li>
 </ul>
 <p>
  <strong>
   A Must Certificates (at least one)
  </strong>
 </p>
 <ul>
  <li>
   OffSec OSCP / OSCP+
  </li>
  <li>
   GIAC GPEN
  </li>
  <li>
   Microsoft Certified: Azure Security Engineer Associate (AZ-500)
  </li>
  <li>
   ISC2 CCSP
  </li>
 </ul>
 <p>
  <strong>
   Strongly Preferred
  </strong>
 </p>
 <ul>
  <li>
   OffSec OSWE (advanced web exploitation / white-box testing)
  </li>
  <li>
   Burp Suite Certified Practitioner (BSCP)
  </li>
  <li>
   Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
  </li>
 </ul>
 <p>
  <strong>
   Tools &amp; Technologies Skills
  </strong>
 </p>
 <ul>
  <li>
   Python, Git, CI/CD integration
  </li>
  <li>
   Burp Suite, common PT toolchains (Kali, scanners, API tooling)
  </li>
  <li>
   Azure security controls (identity, key management, logging/monitoring)
  </li>
  <li>
   AI red teaming tooling (e.g., PyRIT / Foundry scans)
  </li>
 </ul>
 <p>
 </p>
</div>


AI Penetration Testing Specialist

NKU Technologies Pvt.Ltd.

<p>We are seeking a skilled Security Consultant (Offensive Security) with 5&ndash;7 years of experience to support and deliver client-facing security assessment services. This role will work closely with the Lead Penetration Tester/CISO to execute penetration tests, vulnerability assessments, and threat hunting activities, while also contributing to external threat intelligence efforts such as dark web and online community monitoring. The ideal candidate will have strong technical expertise and the ability to independently execute tasks while supporting engagement leadership.</p><p><b>Key Responsibilities:</b></p><ul><li>Support the Lead Penetration Tester in planning, scoping, and executing client engagements.</li><li>Participate in defining testing strategies, methodologies, and rules of engagement.</li><li>Act as a secondary point of contact for clients during assessments.</li><li>Perform penetration testing across web applications, networks, APIs, and cloud environments.</li><li>Conduct vulnerability assessments and validate findings through manual testing.</li><li>Execute portions of red team or adversary simulation exercises under guidance.</li><li>Perform proactive threat hunting to identify indicators of compromise (IOCs) and suspicious activities.</li><li>Analyze logs, endpoint data, and network traffic to detect potential threats.</li><li>Support development of threat hunting hypotheses and detection use cases.</li><li>Conduct monitoring and targeted searches across dark web sources, forums, and platforms such as Discord.</li><li>Identify potential data leaks, credential exposure, and threat actor activity relevant to clients.</li><li>Correlate external intelligence with internal findings to enhance overall risk visibility.</li><li>Prepare detailed technical reports with clear findings and remediation recommendations.</li><li>Support the Lead in presenting results to client stakeholders.</li><li>Translate technical vulnerabilities into business risk where required.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to internal playbooks, tools, and methodologies.</li><li>Stay current with emerging threats, tools, and offensive security techniques.</li></ul><p><b>Required Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li><b>5&ndash;7 years of hands-on experience</b> in penetration testing, vulnerability assessment, or offensive security.</li><li>Experience working in a <b>client-facing or consulting environment</b>.</li><li>Strong understanding of network security, application security, and system architecture.</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Familiarity with frameworks such as OWASP Top 10, MITRE ATT&amp;CK, and CVSS.</li><li>Experience with OSINT, threat intelligence, or dark web monitoring is a plus.</li></ul><p><b>Preferred Certifications:</b></p><ul><li>OSCP (or working toward it)</li><li>CEH, GPEN, or GWAPT</li><li>Other relevant offensive security certifications</li></ul><p><b>Key Skills:</b></p><ul><li>Strong technical and analytical skills</li><li>Ability to work independently while collaborating with senior team members</li><li>Good client communication and reporting skills</li><li>Attention to detail and risk-based thinking</li></ul><p><b>Nice to Have:</b></p><ul><li>Experience with cloud security (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Exposure to SIEM/EDR platforms</li><li>Experience with red teaming or adversary simulation</li></ul><p>Pay: From Rs250,000.00 per month</p><p>Work Location: In person</p>

Cyber Security Officer

help AG

<div><p>Help AG is looking for a talented and experienced Associate Offensive Cybersecurity Consultant (UAE National) who will be involved in a wide range of activities related to cybersecurity and penetration testing. Here are the key areas they will be involved in:</p><p></p><p><br>
o Vulnerability assessment and penetration testing services for web applications.</p><p>
o Web application audits.</p><p>
o Mobile application penetration testing (iOS &amp; Android).</p><p>
o Source code review and software assurance maturity audits.</p><p>
o Red teaming and infrastructure security assessment.</p><p>
o Ability to perform internal and external penetration testing.</p><p>
o Vulnerability research.</p><p><b><br>
Responsibilities:</b></p><br>
<ul><li>
Perform the vulnerability assessment and penetration testing as per Help AG&rsquo;s methodology and scope of the assigned project.</li><li>
Populate the VA and PT knowledge base with new learned techniques, attacks or other zero day findings.</li><li>
Update the Help AG penetration testing guideline by documenting the newly added attacks and procedures to the methodology.</li><li>
Attend technical customer meetings.</li><li>
Research new threats.</li><li>
Perform security assessments independently.</li></ul><p></p><p><b>
Qualifications &amp; Skills:</b></p><br>
<ul><li>
2-5 years of experience as a penetration tester.</li><li>
Bachelor or MSc in Computer Science or relevant degree.</li><li>
Knowledge in web-based programming.</li><li>
Technical writing (including articles, demonstrations, reports and technical blogs).</li><li>
OSCP or OSCE certified.</li><li>
SANS certifications are optional.</li><li>
Good vision, creativity, and problem-solving skills.</li><li>
Software development: the language is not important; we look for the ability to quickly adapt to any language as needed as per the required responsibilities.</li><li>
Good presentation skills.</li><li>
Fast learner.</li><li>
Self-motivation and eagerness to learn.</li><li>
Team player.</li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul><p></p><p><b>
About Us:</b></p><p></p><p>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.</p><p>
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Associate Offensive Cybersecurity Consultant (UAE National)

<p>We are seeking an experienced Penetration Tester and Threat Hunting Specialist to deliver high-quality, client-facing security assessment services. This role is responsible for planning, executing, and managing penetration tests, vulnerability assessments, advanced threat hunting, and external threat intelligence activities (including dark web and community platform monitoring) for a diverse client base.</p><p><b>Key Responsibilities:</b></p><ul><li>Plan and scope penetration testing engagements in collaboration with clients, including defining objectives, timelines, and rules of engagement.</li><li>Act as a primary or supporting point of contact during security assessments.</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li><li>Perform black-box, gray-box, and white-box penetration testing across networks, web/mobile applications, APIs, and cloud environments.</li><li>Conduct comprehensive vulnerability assessments using automated tools and manual validation techniques.</li><li>Simulate real-world attack scenarios to identify exploitable weaknesses.</li><li>Conduct proactive threat hunting across client environments to detect indicators of compromise (IOCs) and advanced persistent threats (APTs).</li><li>Analyze logs, endpoints, and network traffic to uncover hidden or emerging threats.</li><li>Develop and apply threat hunting hypotheses based on threat intelligence and attacker tactics, techniques, and procedures (TTPs).</li><li>Perform monitoring and intelligence gathering across dark web forums, marketplaces, and breach repositories to identify potential data leaks, credential exposure, or targeted threats.</li><li>Conduct searches and monitoring across platforms such as Discord and other online communities where threat actors may operate or share information.</li><li>Identify and report potential brand impersonation, data exposure, or threat actor activity relevant to client environments.</li><li>Correlate external intelligence with internal findings to enhance threat detection and response strategies.</li><li>Deliver clear, concise, and actionable reports tailored for both technical and executive audiences.</li><li>Provide risk ratings, business impact analysis, and prioritized remediation recommendations.</li><li>Present findings to client stakeholders and support remediation discussions.</li><li>Perform re-testing to validate remediation efforts.</li><li>Contribute to the development of testing methodologies, playbooks, and reusable assets.</li><li>Stay current with evolving threats, tools, and industry best practices.</li></ul><p><b>Required Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, or equivalent experience.</li><li><b>7&ndash;10 years of hands-on experience</b> in penetration testing, vulnerability assessment, and/or threat hunting.</li><li>Proven experience in a client-facing penetration testing or security consulting role.</li><li>Strong understanding of network security, system architecture, and application security.</li><li>Hands-on expertise with tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and similar.</li><li>Experience or familiarity with threat intelligence gathering, OSINT, and dark web monitoring techniques.</li><li>Knowledge of common frameworks and standards (e.g., OWASP Top 10, MITRE ATT&amp;CK, CVSS).</li></ul><p><b>Preferred Certifications:</b></p><ul><li>OSCP (Offensive Security Certified Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>GPEN / GWAPT</li><li>CISSP (for senior roles)</li></ul><p><b>Key Skills:</b></p><ul><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Ability to translate technical findings into business risk</li><li>Strong documentation and reporting capabilities</li><li>Ability to manage multiple client engagements simultaneously</li></ul><p><b>Nice to Have:</b></p><ul><li>Experience with dark web intelligence platforms and OSINT tools</li><li>Knowledge of SIEM, EDR, and threat intelligence platforms</li><li>Experience with cloud environments (AWS, Azure, GCP)</li><li>Scripting skills (Python, PowerShell, Bash)</li><li>Experience with red teaming or adversary simulation</li></ul><p><b>Working Model:</b></p><ul><li>Client-facing consulting role (remote/hybrid with occasional travel)</li><li>May require flexibility for testing windows and incident response support</li></ul><p>Pay: From Rs300,000.00 per month</p><p>Work Location: In person</p>

Lead Cyber Security Officer

Rangam

<div>
 <p>
  Rangam is seeking candidates for a Direct Hire role as a
  <strong>
   Specialist, Security Tester
  </strong>
  with our client, one of the world&rsquo;s leading audit, tax and advisory firm.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Seeking candidates in
  </strong>
  :- Atlanta, GA; Austin, TX; Charlotte, NC; Dallas, TX; Fort Worth, TX; Ft Lauderdale, FL; Houston, TX; Jacksonville, FL; Los Angeles, CA; McLean, VA; Miami, FL; Montvale, NJ; New York, NY; Orlando, FL; Philadelphia, PA; Portland, OR; Raleigh, NC; San Diego, CA; San Francisco, CA; Seattle, WA; Short Hills, NJ; Tampa, FL; Washington, DC
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Perform automated application / network penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications
  </li>
  <li>
   Execute dynamic application security tests on web applications and static application security tests on source code, including identifying false positives and reprioritizing findings severity
  </li>
  <li>
   Conduct vulnerability analysis against internal and external networks leveraging automation techniques and solutions
  </li>
  <li>
   Elevate to executing independently in either the application or network domain within one year of service
  </li>
  <li>
   Act with integrity, professionalism, and personal responsibility to uphold client's respectful and courteous work environment
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Minimum one year of recent experience performing application and/or network penetration tests using tools such as AppScan, NetsSparker, Acunetix, BurpSuite, OWASP ZAP, Tenable Nessus, Qualys, Kali Linux, Metasploit, or equivalent; minimum one year of recent experience working with technical and non-technical audiences in reporting results and leading remediation conversations
  </li>
  <li>
   Bachelor's degree from an accredited college or university is required
  </li>
  <li>
   Experience in one or more of the following a plus: mobile application testing, manual code analysis, and/or static analysis using Veracode, Fortify, SonarQube, Checkmarx, Contrast or equivalent
  </li>
  <li>
   Experience in one of the following a plus: Python, JavaScript, PHP, C/C++, SQL, and more
  </li>
  <li>
   One or more ethical hacking certifications preferred (for example: CEH, GWAPT, GPEN, OSCP, OSWA)
  </li>
  <li>
   Ability to travel as necessary
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; client's LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Range: $72600 - $112200
 </p>
 <p>
  <br/>
 </p>
 <p>
  Client's offers a comprehensive compensation and benefits package. Client is an equal opportunity employer. Client complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Satnam Singh
  </strong>
 </p>
 <p>
  SA Technical Recruiter | Rangam Consultants, Inc
 </p>
 <p>
  M: (513) 447-8917
 </p>
 <p>
  E: satnam@rangam.com | W: www.rangam.com
 </p>
 <p>
 </p>
</div>


Specialist, Security Tester

Tata Consultancy Services (TCS)

<div></div><div><div><div><p>Experience &amp; Knowledge Vulnerability Management,Qualys guard , ServiceNow &middot; Executed and experienced in Manual Penetration Testing &middot; Performed Threat modelling &amp; Threat profiling &middot; Security testing related certifications &ndash; CEH, AppScan Certified etc &middot; Conducted secure code reviews &middot; Formulated Pen Testing plans &amp; strategies &middot; Good Security Report
</p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Analyst</div>
</div><div><div><b>Job Id</b></div>
<div>402868</div>
</div><div><div><b>Desired Skills</b></div>
<div>VAPT | VAPT Nexpose Rapid 7</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF BUSINESS STUDIES, BACHELOR OF COMMERCE, BACHELOR OF COMPUTER APPLICATION</div></div></div><div></div>

Application security / Penetration Testing/VAPT(OSCP)

Search 443+ Penetration tester jobs near you this April. New roles added regularly across leading industries. Apply today.