penetration tester

Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4><br>
<p></p><div><div><b>Role</b>:<br>
We are looking for a Junior Penetration Tester to assess and analyze the security posture of organizations by simulating cyber-attacks and identifying potential vulnerabilities. The successful candidate will be responsible for conducting penetration testing, vulnerability assessments, and security audits to ensure the confidentiality, integrity, and availability of our customers and data.<br>
<br>
<b>Responsibilities</b>:<br>
<ul><li>Conduct comprehensive penetration tests on applications, networks, and systems to identify vulnerabilities and weaknesses.</li><li>Develop and execute penetration testing methodologies and strategies to assess the security controls of our organization.</li><li>Prepare detailed reports outlining findings, recommendations, and remediation strategies to address identified security issues.</li><li>Stay updated on the latest security trends, vulnerabilities, and hacking techniques to proactively protect against potential cyber threats.</li><li>Recognize and safely utilize attacker tools, tactics, and procedures</li></ul></div></div><br>
<p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4><br>
<p></p><div><ul><li>Ability to manage and balance own time among multiple tasks, and lead junior staff when required.</li><li>Excellent analytical and problem-solving skills.</li><li>Effective communication skills with the ability to explain technical concepts to non-technical stakeholders.</li><li>Strong problem-solving skills and the ability to think outside the box</li></ul></div><br>
<p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4>
<p></p><div><p>- Bachelor's degree in Computer Science, Information Technology, or related field. - Good knowledge of penetration testing methodologies - In-depth understanding of network protocols and systems - Proficiency in using penetration testing tools such as Metasploit, Nmap, Burp Suite, ... -Good knowledge of security frameworks and standards (e.g., OWASP, NIST) - Experience in conducting application security assessments and vulnerability assessments - Ability to analyze and report on security findings in a clear and concise manner - Expertise in social engineering techniques and physical security assessments - Relevant certifications such as CEH, EWPT, EJPT would be a plus Desirable requirements: - OT/ICS penetration testing experience. - Red Teaming Engagements</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Riyadh, Saudi Arabia</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Entry Level</div>
</div><div><div>Years of Experience</div>
<div>Min: 0 Max: 1</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

Junior Penetration tester

Soar Software Development Company

<p></p><div><h3 class="jobSectionHeader"><b>About us:</b></h3><p>
Soar is a global fintech startup that specializes in financing and investment. Currently headquartered in Saudi Arabia, Soar is growing throughout the region with a mission to help people achieve their financial goals with innovative financial and property investment solutions and tools through its multi-purpose platform, designed to offer a simple and seamless user experience.</p><p></p><h3 class="jobSectionHeader"><b>
Role Summary:</b></h3><p>
We are seeking a highly skilled and motivated Senior Penetration Tester to join our growing security team. In this critical role, you will be responsible for proactively identifying and mitigating security vulnerabilities across our innovative fintech platform. You will conduct advanced penetration tests on our web applications, mobile apps, and cloud infrastructure, working closely with our development and operations teams to embed security into the core of our products and protect our customers' sensitive financial data. &#65039;</p><h3 class="jobSectionHeader"><b>
Key responsibilities:</b></h3><ul>
<li>Lead and execute comprehensive penetration tests and security assessments across Soar's web applications, mobile platforms (iOS/Android), APIs, and cloud infrastructure (AWS/Azure).</li>
<li>Analyze findings, document vulnerabilities with clear, actionable recommendations, and prepare detailed technical reports for both technical and executive stakeholders.</li>
<li>Collaborate with development teams to validate and remediate identified vulnerabilities, providing expert guidance to ensure secure coding practices are implemented throughout the software development lifecycle (SDLC).</li>
<li>Develop and enhance the penetration testing program by creating custom scripts, tools, and methodologies to simulate advanced persistent threats (APTs) and sophisticated attack scenarios.<br>
</li></ul><h3 class="jobSectionHeader"><b>Qualifications &amp; Skills:</b></h3><ul>
<li>5+ years of hands-on experience in penetration testing, with a strong focus on web application and mobile security.</li>
<li>Proficiency with common security assessment tools (e.g., Burp Suite Pro, Metasploit, Nmap, Wireshark) and a deep understanding of the OWASP Top 10 vulnerabilities.</li>
<li>Relevant industry certifications such as OSCP, OSCE, GWAPT, or GPEN.</li>
<li>Experience assessing security in cloud environments (AWS, Azure, or GCP).</li>
<li>Excellent communication skills with the ability to articulate complex technical security issues to a diverse audience.<br>
</li></ul><h3 class="jobSectionHeader"><b>Desirable skills:</b></h3><ul>
<li>Familiarity with the SAMA Cyber Security Framework and other regulatory requirements relevant to the financial sector in Saudi Arabia.</li>
<li>Experience with secure code review or proficiency in a scripting language like Python, PowerShell, or Bash.</li></ul></div>

Senior Penetration Tester

Teamficient

<p><b>Penetration Tester / Ethical Hacker</b></p><p><b>Company:</b> TeamFicient<br/><b>Location:</b> Pakistan (Remote / Hybrid)<br/><b>Employment Type:</b> Full-Time or Contract<br/><b>Salary Range:</b> To be discussed (Negotiable for highly experienced candidates)</p><p><b>Work Schedule:</b></p><ul><li><b>Time Range:</b> Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li><b>Working Hours:</b> 9 hours per day (8 working hours + 1-hour break)</li><li><b>Days Off:</b> TBD (2 days per week)</li></ul><p><b>Why Join Us?</b></p><ul><li><b>Competitive salary</b> based on experience.</li><li><b>Opportunity to grow</b> within an international, people-first organization.</li><li><b>Supportive work environment</b> that values innovation, inclusion, and career growth.</li></ul><p><b>Position Overview</b></p><p>We build an <b>AI-powered MDR and GRC platform</b> that collects logs, runs detections, and maps security and compliance controls.</p><p>The <b>Penetration Tester</b> will secure our applications and client environments through authorized testing of <b>web, API, cloud, and endpoint layers</b>, helping convert findings into remediation tasks and audit evidence.</p><p><b>Key Responsibilities</b></p><ul><li>Conduct <b>authorized penetration tests</b> (web, API, cloud, network, CI/CD).</li><li>Perform <b>vulnerability scanning and manual validation</b> of findings.</li><li>Develop <b>non-destructive proof-of-concept exploits</b> and document impact.</li><li>Produce detailed <b>reports with risk ratings</b>, CVSS scores, and recommendations.</li><li>Translate findings into <b>engineering tickets</b> and support re-tests.</li><li>Integrate <b>SAST/DAST scanners</b> into CI/CD pipelines.</li><li>Conduct <b>periodic vulnerability assessments</b> for demo and production environments.</li><li>Support audits (<b>ISO 27001, SOC 2</b>) with security evidence and training.</li></ul><p><b>Qualifications &amp; Must-Haves</b></p><ul><li><b>2&ndash;5 years</b> of experience in <b>penetration testing or red-team operations</b>.</li><li>Strong web app / API testing skills (<b>OWASP Top 10, SSRF, XSS, CSRF, authentication flaws</b>).</li><li>Familiar with <b>cloud security</b> (Azure / AWS misconfigurations, IAM review).</li><li>Solid knowledge of <b>Linux / Windows internals</b> and networking fundamentals.</li><li>Familiar with <b>CI/CD security</b> and <b>secret management</b>.</li><li>Excellent <b>report writing</b> and <b>collaboration skills</b>.</li></ul><p><b>Preferred / Nice to Have:</b></p><ul><li>Certifications (<b>OSCP, OSWE, eJPT, CEH</b>) are preferred.</li><li>Experience with <b>container security</b> and <b>CI/CD automation</b>.</li><li>Understanding of <b>compliance mapping</b> (ISO 27001, SOC 2, NIST CSF).</li></ul><p><b>Tools &amp; Technologies:</b></p><ul><li>Nmap, Burp Suite, ZAP, Postman, Nessus, OpenVAS, Trivy, Metasploit (limited), GitHub Actions, SonarQube, ClickUp, Confluence, Google Docs</li></ul><p><b>Education:</b></p><ul><li>Bachelor&rsquo;s or Master&rsquo;s in <b>Cybersecurity, Computer Science</b>, or <b>Information Technology</b>.</li><li>Advanced training or certifications in <b>Ethical Hacking</b> are recommended.</li></ul><p><b>Technical/System Requirements</b></p><ul><li><b>Desktop or laptop</b> with Intel <b>Core i7 / i9</b> or AMD <b>Ryzen 7 / 9</b> (or higher) processor</li><li><b>Minimum 32GB RAM</b> for multitasking and large file handling</li><li><b>NVIDIA RTX</b> or <b>AMD Radeon Pro</b> graphics card (recommended)</li><li><b>Workstation free from noise and distractions</b></li><li><b>Stable primary internet connection</b> and <b>backup internet</b></li><li><b>USB headset</b> with noise-cancelling microphone</li><li><b>Backup power source</b> (generator, UPS, or accessible alternative workspace during outages)</li></ul><p>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.</p><p>Join <b>TeamFicient</b> and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul><p>Work Location: Remote</p>

(REMOTE) Penetration Tester / Ethical Hacker

United Sol (Pvt.) Ltd

<p>Conduct authorized security assessments against web, cloud, and infrastructure targets to identify vulnerabilities, verify exploitability, and deliver actionable remediation guidance.</p><p>Responsibilities</p><ul><li>Plan and execute agreed penetration tests (web apps, APIs, cloud, networks) under rules of engagement.</li><li>Produce clear technical reports with risk rating, reproduction steps, and remediation recommendations.</li><li>Work with engineering teams to validate fixes and re-test.</li><li>Keep tools, techniques, and test methodology up to date; contribute to internal playbooks.</li></ul><p>Required</p><ul><li>3+ years in offensive security/penetration testing or red-team engagements.</li><li>Strong web app, network, and host testing experience; familiarity with common tools and manual testing techniques.</li><li>Experience producing clear technical and executive reports.</li><li>Bachelor&rsquo;s in CS/IT or equivalent experience.</li></ul><p>Desired</p><ul><li>OSCP, OSWE, CREST, eJPT or similar certification.</li><li>Experience with cloud (AWS/Azure/GCP) security testing.</li></ul><p>Compliance</p><p>All work is strictly authorized and performed under approved scopes and legal agreements.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Penetration Tester (Offensive Security)

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 <strong>Penetration Testing:</strong> manages and conducts internal and external penetration testing. Vets and coordinates 3rd party vendors and the business to deliver high quality penetration and red team testing. Reviews and validates security findings. Works with the business and information security teams to understand security gaps and guide on improvements.<br> </li>
 <li>
<i> </i> 
 <strong>Vulnerability Scanning:</strong> runs and manages vulnerability scans. Maintains and continuously improves the vulnerability scanning infrastructure. Proactively seeks to minimize operational impact through vulnerability scanning process improvement.<br> </li>
 <li>
<i> </i> 
 <strong>Threat Automation:</strong> creates, develops and manages projects and products that continuously simulate new and emerging security threats and threat actors. Writes, validates and augments tools to support our evolving security requirements, use cases and organizational threat goals. Evaluates and implements software with scalability and repeatability in mind, ensuring that security controls are accurate and measurable.<br> </li>
 <li>
<i> </i> 
 <strong>Red Team Intelligence:</strong> plans, develops and manages unique red team projects to support strategic information security goals. Gains deep insight into infrastructure, applications, business, operational and personnel processes to accurately inform on security risks and vulnerabilities. Emulates and applies real world threat intelligence and attacker techniques to effectively test organizational security. Stays informed, and tenaciously pursues applicable attack paths.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 OSCP, GIAC GPEN, GWAPT or other Penetration Testing certifications, CISSP, Certified Ethical Hacker (CEH) required. Scripting (Windows/*nix), Bash, Python, Perl or Ruby, Systems Programming, strong knowledge on OWASP Top 10, Mobile Application PenTesting.<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div>
 Send CV </div>
 </div>
 <div>
 <div>
 <p>If you meet the job requirements, please send your CV to</p> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Penetration Testing Consultant / Cyber Security Analyst - Red Team

INFRA ASSURE

<p><b>Job Summary:</b><br/>We are urgently seeking an experienced <b>Red Team / Telecom Security Specialist</b> to perform advanced penetration testing and security assessments of telecom networks. The ideal candidate will have hands-on expertise in telecom protocols and the ability to simulate real-world cyber threats to safeguard critical infrastructure.</p><p><b>Key Responsibilities:</b></p><ul><li>Perform specialized telecom penetration testing, including assessments of <b>SS7, Diameter, GTP, and SIP protocols</b> to identify signalling and interconnect vulnerabilities.</li><li>Simulate telecom-specific adversarial scenarios such as <b>location tracking, SMS interception, and fraud exploitation</b> to evaluate core telecom infrastructure defenses.</li><li>Collaborate with telecom operations and engineering teams to review configurations of <b>HLR, MME, SGSN, and other network elements</b> for security hardening opportunities.</li><li>Integrate security tools and checks into <b>CI/CD pipelines</b>, including automated <b>SAST, DAST, and container image scanning</b>, to identify issues early in the software lifecycle.</li><li>Conduct in-depth <b>application security reviews</b> and threat modeling to uncover design flaws and coding vulnerabilities before production deployment.</li><li>Promote and enforce secure <b>DevOps practices</b>, including policies for secrets management, infrastructure-as-code security scanning, and continuous compliance monitoring.</li><li>Perform continuous security assessments and penetration testing across <b>IT and OT environments</b>.</li><li>Conduct advanced <b>Red Team operations</b> simulating real-world cyber threats.</li><li>Develop <b>attack simulation strategies</b> to test the effectiveness of security controls.</li><li>Identify, exploit, and document vulnerabilities in applications, networks, and systems.</li><li>Assess and improve <b>incident detection and response capabilities</b>.</li><li>Provide detailed reports on <b>security gaps, attack vectors, and mitigation recommendations</b>.</li><li>Collaborate with <b>Blue Teams</b> to enhance defensive strategies.</li></ul><p><b>Requirements:</b></p><ul><li>Proven experience in <b>telecom penetration testing</b> and red team operations.</li><li>Deep knowledge of <b>telecom protocols</b> (SS7, Diameter, GTP, SIP).</li><li>Strong understanding of <b>core telecom network elements</b> (HLR, MME, SGSN, etc.).</li><li>Hands-on experience with <b>security tools</b>, CI/CD integration, and automated security testing.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent communication and report-writing skills.</li></ul><p><b>Preferred Qualifications:</b></p><ul><li>Certifications such as <b>OSCP, CREST CRT, GPEN, or similar</b>.</li><li>Experience in <b>DevSecOps</b> and <b>cloud security</b>.</li><li>Prior experience in <b>fraud and threat simulation</b> in telecom networks.</li></ul><p>Job Type: Contract<br/>Contract length: 12 months</p><p>Application Question(s):</p><ul><li>Have you worked with SS7, Diameter, GTP, or SIP protocols in a security testing context?</li><li>Have you performed telecom-specific adversarial simulations like location tracking, SMS interception, or fraud exploitation?</li><li>Have you reviewed configurations of HLR, MME, SGSN, or other telecom network elements for security hardening?</li><li>Are you familiar with integrating security testing into CI/CD pipelines? Which tools have you used (SAST, DAST, container scanning, etc.)</li><li>Are you proficient with Red Team tools, such as Metasploit, Cobalt Strike, Burp Suite, Wireshark, or custom scripts?</li><li>Are you available to start immediately ?</li><li>What is your expected salary ?</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>penetration testing or Red Team operations: 4 years (Preferred)</li></ul><p>Language:</p><ul><li>Arabic (Preferred)</li></ul><p>License/Certification:</p><ul><li>security certifications (OSCP, CREST CRT, GPEN, etc.) (Preferred)</li></ul><p>Location:</p><ul><li>Dubai (Preferred)</li></ul>

Red Team / Telecom Security Specialist

Search 521+ Penetration tester jobs near you this November. New roles added regularly across leading industries. Apply today.

521 penetration tester jobs NEAR_ME

Junior Penetration tester

Senior Penetration Tester

(REMOTE) Penetration Tester / Ethical Hacker

(REMOTE) Penetration Tester / Ethical Hacker

Penetration Tester (Offensive Security)

Penetration Testing Consultant / Cyber Security Analyst - Red Team

Red Team / Telecom Security Specialist