penetration tester

Magnatec Systems Private Limited

<p><b>About the Role</b></p><p>We are hiring a hands-on penetration testing engineer to conduct security assessments across our web applications, mobile platforms, and APIs. We expect deep manual testing &mdash; not scanner-only work &mdash; strong methodology, and clear reporting at every phase.</p><p><b>Key Responsibilities</b></p><p><b>Web &amp; Mobile Application \ Api Security Testing</b></p><ul><li>Manual black-box and grey-box testing following OWASP Top 10</li><li>Test for SQLi, XSS, CSRF, IDOR, SSRF, Broken Authentication, and Access Control flaws</li><li>Assess session management, cookies, HTTP headers, and client-side JavaScript logic</li><li>Static and dynamic assessment of Android and iOS apps following OWASP MASVS</li><li>APK/IPA reverse engineering, hardcoded secrets detection, insecure local storage</li><li>SSL pinning bypass, MitM traffic interception, runtime instrumentation</li><li>Biometric bypass, session token handling</li><li>Test REST endpoints against OWASP API Security Top 10</li><li>Focus on BOLA, JWT abuse, OAuth 2.0 flaws, mass assignment, and rate limiting gaps</li></ul><p><b>Reporting</b></p><ul><li>CVSS-scored findings with reproduction steps and proof-of-concept screenshots</li><li>Executive summary for management and full technical report for developers</li><li>Prioritised remediation roadmap and re-testing after fixes</li></ul><p><b>Requirements</b></p><p><b>Must Have</b></p><ul><li>3+ years hands-on penetration testing &mdash; web and mobile focus</li><li>Strong knowledge of OWASP Top 10, OWASP MASVS, OWASP API Security Top 10</li><li>Android and iOS hands-on testing experience</li><li>Professional report writing for both technical and non-technical audiences</li></ul><p><b>Nice to Have</b></p><p><b>Essential Tools</b></p><p>Burp Suite Pro, OWASP ZAP, SQLMap, Nikto, Gobuster,MobSF, jadx, apktool, Frida, Objection, ADB, Charles Proxy,Postman, jwt_tool, InQL,</p><p>Work Location: In person</p>

Penetration Tester

Mercor

<div>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 <strong>
  Mercor
 </strong>
 connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include
 <strong>
  Benchmark
 </strong>
 ,
 <strong>
  General Catalyst
 </strong>
 ,
 <strong>
  Peter Thiel
 </strong>
 ,
 <strong>
  Adam D'Angelo
 </strong>
 ,
 <strong>
  Larry Summers
 </strong>
 , and
 <strong>
  Jack Dorsey
 </strong>
 .
 <br/>
 <br/>
 <strong>
  Position:
 </strong>
 Cybersecurity Expert
 <br/>
 <br/>
 <strong>
  Type:
 </strong>
 <strong>
  Contract
  <br/>
  <br/>
 </strong>
 <strong>
  Compensation:
 </strong>
 <strong>
  $1,750&ndash;$2,150 per completed task
  <br/>
  <br/>
 </strong>
 <strong>
  Location:
 </strong>
 <strong>
  Remote
  <br/>
  <br/>
 </strong>
 <strong>
  Role Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Review and evaluate AI-generated outputs related to threat analysis, vulnerability assessment, and security architecture recommendations.
  </li>
  <li>
   Create realistic scenarios based on cybersecurity workflows such as incident response runbooks, threat hunting queries, and penetration testing reports.
  </li>
  <li>
   Annotate, label, and validate data across cybersecurity use cases like CVE classification accuracy and SIEM alert triage.
  </li>
  <li>
   Provide structured feedback on AI accuracy in areas such as cybersecurity frameworks (NIST CSF, MITRE ATT&amp;CK) and threat intelligence standards (STIX/TAXII).
  </li>
  <li>
   Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Must-Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3+ years of professional experience in cybersecurity at an enterprise organization, MSSP, consultancy, or government/defense environment.
  </li>
  <li>
   Background in areas such as SOC analysis, incident response (DFIR), penetration testing, threat intelligence, or security architecture.
  </li>
  <li>
   Strong analytical thinking and ability to translate security operations into structured evaluation tasks.
  </li>
  <li>
   Clear written communication and attention to detail.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Professional certifications like CISSP, CISM, CEH, OSCP, GIAC certifications, Security+.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compensation &amp; Legal
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Task Completion Pay: Competitive and based on task quality.
  </li>
  <li>
   Performance Bonus: Weekly bonus incentive for top performers.
  </li>
  <li>
   Hourly Opportunity: Transition to hourly compensation for sustained quality.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Application Process (Takes 20&ndash;30 mins to complete)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Upload resume
  </li>
  <li>
   AI interview based on your resume
  </li>
  <li>
   Submit form
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Resources &amp; Support
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
  </li>
  <li>
   For any help or support, reach out to: support@mercor.com
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 </em>
</div>


Penetration Tester | Upto $2150 Part-time

Palo Alto Networks

<div><div>Dubai, United Arab Emirates Sales Ref ID: JR-017080</div><p></p><div><br>
</div><div><p><b>Our Mission</b></p><p></p><p>
At Palo Alto Networks&reg;, we&rsquo;re united by a shared mission&mdash;to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you&rsquo;re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you&rsquo;re in the right place.</p><p></p><p><b>
Who We Are</b></p><p></p><p>
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!</p><p></p>
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.<p></p><p><b>
Job Summary</b></p><p></p><p><b>
Your Career</b></p><p>
The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will have experience leading Red &amp; Purple team engagements. They will be the client&rsquo;s advocate for cybersecurity best practices related to offensive security and will provide strong recommendations in this domain.</p><p></p><p><b>
Your Impact</b></p><ul><li><p>
Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools - Red Team experience essential</p></li><li><p>
Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel</p></li><li><p>
Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients</p></li><li><p>
Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements</p></li><li><p>
Conducts periodic scans of networks to find and detect vulnerabilities</p></li><li><p>
Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)</p></li><li><p>
Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks&rsquo; threat hunting tools (and/or client owned hunting instrumentation where applicable)</p></li><li><p>
Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders</p></li><li><p>
Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach</p></li><li><p>
Ability to perform travel requirements as needed to meet business demands
</p></li></ul><p></p><p><b>This role can be hired for Riyadh, Remote or Dubai Remote</b></p><p></p><p><b>
Qualifications
</b></p><p></p><p><b>Your Experience</b></p><ul><li><p>
6+ years of professional experience leading Red &amp; Purple team engagements, Advanced Attack Simulations, OSINT research, social engineering techniques, bespoke security assessments and exploit development,</p></li><li><p>
Experience testing a range of technologies (Active Directory, major OSs, cloud environments, IoT / OT) and using a range of security tools and technologies inc AI-enabled to automate and tailor engagements.</p></li><li><p>
Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.)</p></li><li><p>
Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit</p></li><li><p>
Strong knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing</p></li><li><p>
Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities</p></li><li><p>
Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure)</p></li><li><p>
Experience with scripting and editing existing code and programming using one or more of the following - Perl, Python, ruby, bash, C/C++, C#, or Java</p></li><li><p>
Experience with security assessment tools, including Nessus, OpenVAS, MobSF Metasploit, Burp Suite Pro, Cobalt Strike, Bloodhound, and Empire</p></li><li><p>
Knowledge of application, database, and web server design and implementation</p></li><li><p>
Knowledge of network vulnerability assessments, web and cloud application security testing, network penetration testing, red teaming, security operations, or 'hunt'</p></li><li><p>
Knowledge of open security testing standards and projects, including OWASP &amp; MITRE ATT&amp;CK</p></li><li><p>
Ability to read and use the results of mobile code, malicious code, and anti-virus software</p></li><li><p>
Knowledge of computer forensic tools, technologies, and methods</p></li><li><p>
Assist in the development of internal infrastructure design for research, development, and testing focused on offensive security</p></li><li><p>
Identified ability to grow into a valuable contributor to the practice and, specifically</p><ul><li><p>
develop an external presence via public speaking, conferences, and/or publications</p></li><li><p>
have credibility, executive presence, and gravitas</p></li><li><p>
be able to have a meaningful delivery contribution</p></li><li><p>
have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products</p></li><li><p>
be collaborative and able to build relationships internally, externally, and across all PANW functions, including the account teams</p></li></ul></li></ul><p></p><ul><li><p>
Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience to meet job requirements and expectations or equivalent military experience required</p></li><li><p>
Hold industry leading certifications from OffSec (OSCE / OSCP / OSWP etc), CREST, GIAC (SANS), and preferably published vulnerabilities, competition winners, conference talks, and published papers or thought leadership</p></li></ul><p></p><p><b>
Our Commitment
</b></p><p></p><p>We&rsquo;re trailblazers that dream big, take risks, and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.</p><p></p><p>
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.</p><p></p><p>
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.</p><p></p><p>
All your information will be kept confidential according to EEO guidelines.</p><p></p>
Is role eligible for Immigration Sponsorship?: Yes</div></div><p></p>

Principal Consultant, Red Team (Unit 42)

HayDevs

<p>Key Responsibilities</p><ul><li>Conduct security research on emerging cyber threats, attack techniques, and vulnerabilities.</li><li>Perform Vulnerability Assessments and Penetration Testing (VAPT) on web applications, mobile applications, APIs, cloud platforms, and internal networks.</li><li>Identify, validate, and document security vulnerabilities with clear reproduction steps and remediation recommendations.</li><li>Analyze security incidents, malware samples, and attack patterns when required.</li><li>Conduct reconnaissance and attack surface mapping for security assessments.</li><li>Research and test new security tools, frameworks, and methodologies.</li><li>Prepare detailed technical and executive-level security reports.</li><li>Assist development teams in understanding and mitigating security risks.</li><li>Monitor vulnerability disclosures, CVEs, security advisories, and threat intelligence feeds.</li><li>Participate in responsible disclosure and bug bounty programs where authorized.</li><li>Develop proof-of-concept demonstrations for identified vulnerabilities.</li><li>Support compliance initiatives including ISO 27001, SOC 2, PCI-DSS, and other security frameworks where applicable.</li><li>Maintain confidentiality of client information and assessment results.</li></ul><p>Required Skills</p><ul><li>Strong understanding of cybersecurity principles and attack methodologies.</li><li>Knowledge of:</li><li>Web Application Security (OWASP Top 10)</li><li>API Security</li><li>Mobile Application Security</li><li>Network Security</li><li>Cloud Security</li><li>Experience with vulnerability assessment and penetration testing tools.</li><li>Familiarity with:</li><li>Burp Suite</li><li>Nmap</li><li>Wireshark</li><li>Nessus</li><li>Metasploit</li><li>OWASP ZAP</li><li>Understanding of authentication, authorization, encryption, and secure coding practices.</li><li>Ability to analyze logs, traffic captures, and security events.</li><li>Strong technical report-writing skills.</li><li>Excellent analytical and problem-solving abilities.</li></ul><p>Pay: Up to Rs1.00 per month</p><p>Work Location: In person</p>

Cyber Security Researcher

Barracuda Networks

<div><div>Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.</div><div>
</div><div>
We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.</div><div></div><div><br>
</div><div><b>
Envision yourself at Barracuda</b></div><div>
</div><div>
As a Senior Application Security Engineer, you&rsquo;ll help shape the future of our AppSec program. You&rsquo;ll work effectively and efficiently in a small, high-impact team, bringing a sense of ownership and community. You&rsquo;ll have the opportunity to learn quickly, provide feedback on long-term improvements, and drive strategic security initiatives across our product portfolio.</div><div>
</div><div><b>
Tech Stack:</b></div><ul><li><div>
TypeScript/JavaScript, Python, Ruby, Java, Go</div></li><li><div>
CI/CD automation tools (SAST, SCA, Secrets Scanning, etc.)</div></li><li><div>
AI security controls and LLM risk management</div></li></ul><div><b>
What you&rsquo;ll be working on</b></div><ul><li><div>
Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs</div></li><li><div>
Facilitate lightweight, feature-level threat models and drive risk-based discussions</div></li><li><div>
Perform hands-on application penetration tests and security-focused source code reviews</div></li><li><div>
Drive risk rating and vulnerability management processes</div></li><li><div>
Partner with product, platform, and engineering leads to drive security initiatives</div></li><li><div>
Lead outcome-focused design review discussions and security trainings</div></li><li><div>
Provide framework-specific remediation guidance to developers</div></li></ul><div><b>
What you bring to the role</b></div><ul><li><div>
5 - 8+ years in product-focused AppSec, with a track record of embedding security and reducing late-stage findings via automation and developer enablement</div></li><li><div>
Deep practical knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls)</div></li><li><div>
Proficient in at least two programming languages (TypeScript/JavaScript, Python, Ruby, Java, Go, etc.)</div></li><li><div>
Hands-on experience with application penetration testing and code reviews</div></li><li><div>
Proficient in threat modeling and risk-based analysis</div></li><li><div>
Strong organizational, time-management, communication, and presentation skills</div></li></ul><div>
</div><div><b>
What you&rsquo;ll get from us</b></div><div>
A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility &ndash; there are opportunities for cross training and the ability to attain your next career step within Barracuda.
</div><div>
</div><ul><li><div>Equity, in the form of non-qualifying options</div></li><li><div>
High-quality health benefits</div></li><li><div>
Retirement Plan with employer match</div></li><li><div>
Career-growth opportunities</div></li><li><div>
Flexible Time Off and Paid Time Off benefits</div></li><li><div>
Volunteer opportunities</div></li></ul><div>
</div><div>
#LI-remote</div><div>
</div><div>
Job ID: 27-0245</div></div>

Senior Application Security Engineer

Yatsudoki Chateraise

<p><b>Job Purpose</b></p><ul><li>To establish and maintain a corporate-wide information cyber security management program and ensure that information assets are adequately protected.</li></ul><p><b>Primary Duties Performed</b></p><ul><li>Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program;</li><li>Work directly with the CTO and all IT functions to facilitate cyber security and risk assessment and its processes;</li><li>Evaluate the IT threat landscape to reduce risk, leading auditing, and compliance initiatives,</li><li>Assist in implementation of the IT Cyber Security strategies, policies and procedures;</li><li>Prepare the documentation for the IT Cyber Security reports and guidelines;</li><li>Develop and enhance an information security management framework;</li><li>Monitor, maintain and administrate the IT security devices (such as Firewalls, Cor Switches, Web filtering, Spam Filtering devices... etc.) in coordination with IT Infrastructure and Cloud Unit to ensure no threats impacting the operations of these devices.</li><li>Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services;</li><li>Partner with business stakeholders across INDEX Holding group to raise the awareness of Cyber Security risk management concerns by conducting the required training and workshops;</li><li>Assists with the overall business technology planning, providing a current knowledge and future vision of technology and systems.</li><li>Manage and maintain cyber security incident management and track accordingly;</li><li>Review the audit reports and assist to tackle the security issues raised by the auditors.</li><li>Conduct a periodic security check on all the relevant IT systems and services that are running in production.</li><li>Conduct a periodic penetration testing to the relevant technologies that are running in production.</li><li>Conduct a periodic vulnerability assessment to the relevant technologies that are running in production.</li><li>Perform a periodic check of the backup restoration practice in INDEX holding to ensure the consistency of the backup data and integration;</li><li>Assist in controlling IT related risk by advising management and functional units on all IT policies and procedures;</li><li>Ensure the confidentiality and protection of corporate data, proprietary information and intellectual property;</li><li>Check the updates on the systems to ensure the patch management with the latest patches and upgrades on a regular basis;</li><li>Assist in managing the crisis situations, involving complex technical hardware or software problems and ensure adequate provision for business continuity and disaster recovery;</li><li>Ensuring that INDEX Holding is adaptable to evolving cyber security compliance regulations.</li><li>Solicit, study and evaluate all IT Projects Plans to ensure risk low effectiveness, in addition, identify and develop risk analysis and supervise risk management for the IT department;</li><li>Undertake such other tasks as and when required by the Chief Technology Officer.</li></ul><p><b>3. Contacts</b></p><p>Internal:</p><ul><li>Chief Technology Officer</li><li>All IT Team</li><li>All other employees of INDEX Holding</li></ul><p>External:</p><ul><li>IT Service Suppliers</li><li>IT Vendors</li></ul><p><b>4. Independence of Operation</b></p><ul><li>Data access, security and integration;</li><li>Reduction in IT related risks, business continuity and disaster recovery plans; and</li><li>Coordinate with the department employees to provide the necessary IT Security adviser to the Group employees.</li></ul><p><b>5. Qualifications and Experience Required</b></p><ul><li>Degree in IT related discipline Computer Science or equivalent and additional professional technical training/certifications in System Administration;</li><li>Master&rsquo;s Degree on IT or equivalent is preferred;</li><li>Certification in Cyber Security, Certified Ethical Hacker, and hands-on experience associated with risk management, Penetration Testing and Vulnerability Assessment;</li><li>Minimum 5 years of IT experience in IT Cyber Security, IT Systems and Networking Evaluation;</li><li>Demonstrate knowledge of security standards and their applications;</li><li>Exposure with the latest technology and research background will be an added advantage;</li><li>Good project management skills</li><li>Excellent communication skills in English, both written and oral. Arabic language is an advantage;</li><li>Excellent organizational and time management skills; and</li><li>Good interpersonal skills.</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>What is your salary expectation in AED?</li><li>Have you worked on security technologies and applications related to Microsoft, Cisco, and AWS?</li><li>How many years of experience do you have in IT Security and Risk Management within the UAE?</li><li>Which certifications do you hold (CISSP, CEH, CISM, CISA)?</li><li>How many years of experience do you have in cybersecurity?</li></ul><p>Work Location: In person</p>

Cyber Security Specialist

Deloitte

<div>
 <strong>
  Cyber Security I OT Cybersecurity Tech Lead, Cairo. Egypt
  <br/>
  <br/>
 </strong>
 <strong>
  Connect to your career at Deloitte.
  <br/>
  <br/>
 </strong>
 <strong>
  Deloitte
 </strong>
 <strong>
  ,
 </strong>
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 <br/>
 <br/>
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 <br/>
 <br/>
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 <br/>
 <br/>
 <strong>
  Connect to your opportunity.
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct comprehensive OT penetration testing and vulnerability assessments on industrial control systems, SCADA, and other OT environments.
  </li>
  <li>
   Identify, analyse, and exploit security weaknesses in OT networks, devices, and protocols.
  </li>
  <li>
   Develop and execute customised attack scenarios to simulate real-world cyber threats targeting OT systems.
  </li>
  <li>
   Perform detailed technical analysis of OT cyber threats, including malware, intrusion techniques, and threat actor tactics, techniques, and procedures (TTPs).
  </li>
  <li>
   Gather, analyse, and disseminate cyber threat intelligence relevant to OT environments to inform risk management and incident response.
  </li>
  <li>
   Collaborate with cross-functional teams including IT security, engineering, and operations to design and implement effective OT security controls.
  </li>
  <li>
   Provide technical guidance and recommendations to clients or internal stakeholders on OT security best practices and remediation strategies.
  </li>
  <li>
   Prepare detailed technical reports, including findings, risk assessments, and mitigation plans.
  </li>
  <li>
   Stay current with emerging OT security threats, vulnerabilities, and industry trends.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect To Your Skills And Professional Experience.
  <br/>
  <br/>
 </strong>
 To succeed in this role, you will need to match the following criteria:
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
  </li>
  <li>
   Minimum 7 years of experience in OT cybersecurity, with a strong focus on penetration testing and threat intelligence.
  </li>
  <li>
   In-depth knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, IEC 61850) and industrial control systems architecture.
  </li>
  <li>
   Proven expertise in OT penetration testing tools and methodologies.
  </li>
  <li>
   Strong understanding of cyber threat intelligence frameworks and experience analysing threat actor behaviour.
  </li>
  <li>
   Hands-on experience with vulnerability scanning, exploit development, and security assessment tools specific to OT environments.
  </li>
  <li>
   Familiarity with OT security standards and frameworks such as ISA/IEC 62443, NIST SP 800-82.
  </li>
  <li>
   Excellent analytical, problem-solving, and communication skills.
  </li>
  <li>
   Relevant certifications such as GIAC GICSP, OSCP, OSCE, or similar are highly desirable.
  </li>
  <li>
   Ability to work independently and as part of a multidisciplinary team.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect to your service line &ndash; Technology and Transformation
  <br/>
  <br/>
 </strong>
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 <br/>
 <br/>
 <strong>
  Personal independence
  <br/>
  <br/>
 </strong>
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 <br/>
 <br/>
 <strong>
  Connect to your Industry
  <br/>
  <br/>
 </strong>
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 <br/>
 <br/>
 <strong>
  Connect with your colleagues
  <br/>
  <br/>
 </strong>
 Location: Cairo. Egypt
 <br/>
 <br/>
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 <br/>
 <br/>
 <strong>
  Our commitment to you
  <br/>
  <br/>
 </strong>
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 <br/>
 <br/>
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 <br/>
 <br/>
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 <br/>
 <br/>
 <strong>
  Connect to your next step
  <br/>
  <br/>
 </strong>
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 <br/>
 <br/>
</div>


Deloitte Innovation Hub I Cyber Security I OT Cybersecurity Tech Lead, Cairo. Egypt

Search 116+ Penetration tester jobs near you this June. New roles added regularly across leading industries. Apply today.