Offensive Web & Mobile Security Tester

Tanqeeb; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

Tanqeeb is seeking a highly skilled Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. You will identify vulnerabilities, simulate attacks, and help clients strengthen their application security posture.

This role requires hands-on offensive security experience and the ability to clearly communicate findings to both technical and non-technical stakeholders. Willingness to travel within the GCC for on-site engagements is expected.

Qualifications

• Degree in Computer Science, Cybersecurity, or related field.
• Minimum 2 years of experience in application security testing (web/mobile).
• Strong knowledge of web technologies (HTTP/S, APIs, authentication).
• Experience with mobile platforms (iOS, Android) and related security risks.
• Hands-on testing with Burp Suite, ZAP, Metasploit, etc.
• Solid understanding of OWASP Top 10 and secure coding practices.
• Strong reporting and communication skills in English.

Responsibilities

• Perform web and mobile application penetration testing (black/grey/white box).
• Identify, exploit, and document vulnerabilities per OWASP standards.
• Produce detailed penetration testing reports with executive summaries and remediation guidance.
• Present findings to clients and support remediation discussions.
• Test REST APIs, microservices, and modern web architectures.
• Support red team exercises when required.
• Engage with clients to understand testing scope and architecture.

Skills

Communication skills

Analytical mindset

Teamwork

Willingness to travel (GCC)

Education

Bachelor's degree in Computer Science/Cybersecurity or related field

Cybersecurity certifications (OSCP/OSWE/CEH)

Tools

Burp Suite

OWASP ZAP

Metasploit

MobSF

Frida

Job description

Tanqeeb is seeking a highly skilled Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. You will identify vulnerabilities, simulate attacks, and help clients strengthen their application security posture.

This role requires hands-on offensive security experience and the ability to clearly communicate findings to both technical and non-technical stakeholders. Willingness to travel within the GCC for on-site engagements is expected.