Penetration Tester

Dicetek LLC; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm in Dubai is seeking skilled professionals to perform penetration testing and conduct vulnerability assessments on complex systems. You will engage with security frameworks like ISO and NIST, contributing to the enhancement of digital security practices. The ideal candidate has strong knowledge of current cybersecurity threats, is proficient in using various testing methodologies, and has experience in automation initiatives. Join us to uplift security in government and enterprise services.

Qualifications

• Experience with penetration testing and vulnerability research on complex systems.
• Familiarity with security frameworks and compliance standards.
• Strong understanding of cybersecurity threats and attack vectors.

Responsibilities

• Perform penetration testing on proprietary software.
• Identify vulnerabilities in systems using various methods.
• Contribute to improving security practices in digital services.

Skills

Penetration testing

Vulnerability assessment

Cybersecurity frameworks

Risk analysis

Automation initiatives

Education

Relevant cybersecurity certification (e.g., Certified Ethical Hacker)

Tools

ISO 27001

NIST SP-800-53

OWASP Testing Framework

MITRE ATT&CK

Job description

Responsibilities

• Perform penetration testing and vulnerability research on complex proprietary software, hardware, and client service environments.
• Identify and assess vulnerabilities in systems and applications using manual and automated testing methods, including the discovery and exploitation of code flaws, misconfigurations, and insecure components.
• Build, maintain, and support RedTeam testing infrastructure and simulation capabilities.
• Support the enhancement of vulnerability assessment practices, penetration testing procedures, secure development practices, and automation initiatives.
• Contribute to uplifting the security posture of government digital services through advanced testing techniques, knowledge transfer, and continuous improvement initiatives.
• Monitor and keep cybersecurity knowledge current by tracking the latest security threats, vulnerabilities, and attack trends.
• Use evidence-based assessment and reporting approaches supported by logs, screenshots, samples, or technical proof‑of‑concepts.

Technical Specification

• Use internationally recognized cybersecurity and testing frameworks such as:
  • ISO 27001
  • ISO 22301
  • NIST SP-800-53
  • NIST SP-800-115
  • MITRE ATT&CK
  • OWASP Testing Framework
  • PTES
  • OSSTMM
• Apply structured and repeatable methodologies for:
  • Penetration testing
  • Vulnerability assessment and validation
  • Security hardening and configuration review