Lead Advanced Penetration Tester

Stellar Technologies; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

Stellar Technologies in Dubai is seeking a Lead Advanced Penetration Tester with 6+ years of hands-on experience to head complex security assessments across web apps, APIs, mobile apps, networks, AD, and cloud environments.

You will lead testing engagements, identify and exploit critical vulnerabilities, produce technical reports, provide remediation guidance, and mentor junior testers while supporting scoping and pre-sales activities.

Qualifications

• 6+ years hands-on penetration testing experience.
• Strong expertise in advanced web app and API testing.
• Experience in internal and external network testing, AD, and privilege escalation.
• Certifications: OSCP or OSWE/OSEP preferred.

Responsibilities

• Lead advanced penetration testing of web apps, APIs, mobile apps, networks, AD, and cloud environments.
• Identify and exploit complex vulnerabilities, business logic flaws and escalation opportunities.
• Perform advanced web app exploitation, source-code analysis, and security testing.
• Conduct technical reviews of assessment findings and reports.
• Define testing approaches, validate vulnerabilities, and provide remediation guidance.
• Lead client technical discussions, present findings, and support remediation activities.
• Mentor testers and contribute to methodologies and capability development.
• Support technical scoping, effort estimation, and pre-sales activities.

Skills

Penetration testing

Web app testing

API testing

Network testing

Active Directory

Privilege escalation

Reporting

Client management

Mentoring

Pre-sales support

Job description

About the role

Stellar Technologies is looking for a Lead Advanced Penetration Tester with 6+ years of hands-on experience to join our team in Dubai. This is a full-time role leading advanced penetration testing engagements across web applications, APIs, mobile applications, networks, Active Directory, and cloud environments.

What you'll do

• Lead advanced penetration testing of web applications, APIs, mobile applications, networks, Active Directory, and cloud environments
• Identify and exploit complex vulnerabilities, business logic flaws, privilege escalation opportunities, and chained attack scenarios
• Perform advanced web application exploitation, source-code analysis, and security testing
• Conduct technical reviews of assessment findings and penetration testing reports
• Define testing approaches, validate vulnerabilities, and provide actionable remediation recommendations
• Lead client technical discussions, present findings, and support remediation activities
• Mentor penetration testers and contribute to methodologies and technical capability development
• Support technical scoping, effort estimation, and pre-sales activities

What you'll bring

• 6+ years of hands-on penetration testing experience
• Strong expertise in advanced web application and API penetration testing
• Proven experience in internal and external network penetration testing, Active Directory, and privilege escalation
• Excellent technical report-writing, communication, and client management skills
• Demonstrated ability to lead complex assessments and mentor technical teams

Certifications

You hold either OSCP, or both OSEP and OSWE.

Nice to have

• Experience in technical scoping and effort estimation for pre-sales
• Experience presenting findings directly to client stakeholders
• Experience developing or improving testing methodologies