Mới Penetration Tester (PT) - Relocate to Dubai, UAE

VIRTUAL SECURITY LAB CYBER RISK MANAGEMENT SERVICES L.L.C; Dubai; Hybrid; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm in Dubai is seeking a skilled Penetration Tester to identify security vulnerabilities through simulated cyberattacks. The ideal candidate will perform extensive testing across cloud and on-premises environments, provide detailed reporting on vulnerabilities, and support DevSecOps initiatives. Strong knowledge of tools such as Burp Suite and a background in security testing are essential for this role.

Qualifications

• Experience in security testing across various platforms including cloud and on-premises.
• Proficiency in application security testing based on industry standards such as OWASP.
• Ability to conduct comprehensive reports on vulnerabilities and remediation.

Responsibilities

• Simulate cyberattacks to identify vulnerabilities in systems and applications.
• Conduct assessments of cloud infrastructures such as AWS and Azure.
• Prepare detailed reports and present findings to stakeholders.

Skills

Vulnerability assessment

Penetration testing

Application security testing

Cloud security

Red Team operations

Social engineering techniques

Tools

Burp Suite

Postman

ZAP

mitmproxy

Job description

Penetration Tester (PT) - Relocate to Dubai, UAE

The Penetration Tester is responsible for simulating cyberattacks to identify security vulnerabilities across systems, applications, networks, and devices. The role involves recommending remediation measures to strengthen security defenses and mitigate risks.

2. Key Responsibilities

System & Network Security Testing

• Perform vulnerability assessments on systems, including Windows, Linux, Cloud, and Kubernetes environments.

• Conduct internal network penetration tests targeting VPN, firewalls, IDS/IPS, and other network components.

• Assess and exploit security weaknesses in cloud infrastructure (AWS, Azure, GCP).

Application Security Testing (Web, Mobile, API, Thick Client)

• Test for vulnerabilities based on OWASP Top 10, API Security Top 10, and Mobile Top 10 standards.

• Evaluate application security across Android, iOS, Windows, macOS, and Linux platforms.

• Test RESTful APIs, GraphQL, and SOAP APIs using tools such as Burp Suite, Postman, ZAP, and mitmproxy.

Advanced Penetration Testing

• Perform Red Team operations and adversary simulations to emulate real-world attack scenarios.

• Leverage advanced attack techniques, including privilege escalation, lateral movement, and evasion tactics.

• Conduct Active Directory (AD) security assessments.

• Execute social engineering campaigns, including phishing, vishing, and smishing.

Analysis & Reporting

• Prepare detailed technical reports outlining vulnerabilities and recommended remediation actions.

• Present findings to clients, developers, and stakeholders.

• Support DevSecOps initiatives by integrating security testing into the CI/CD pipeline.