Penetration Tester

Tanqeeb; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

Tanqeeb is seeking a highly skilled Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. You will identify vulnerabilities, simulate attacks, and help clients strengthen their application security posture.

This role requires hands-on offensive security experience and the ability to clearly communicate findings to both technical and non-technical stakeholders. Willingness to travel within the GCC for on-site engagements is expected.

Qualifications

• Degree in Computer Science, Cybersecurity, or related field.
• Minimum 2 years of experience in application security testing (web/mobile).
• Strong knowledge of web technologies (HTTP/S, APIs, authentication).
• Experience with mobile platforms (iOS, Android) and related security risks.
• Hands-on testing with Burp Suite, ZAP, Metasploit, etc.
• Solid understanding of OWASP Top 10 and secure coding practices.
• Strong reporting and communication skills in English.

Responsibilities

• Perform web and mobile application penetration testing (black/grey/white box).
• Identify, exploit, and document vulnerabilities per OWASP standards.
• Produce detailed penetration testing reports with executive summaries and remediation guidance.
• Present findings to clients and support remediation discussions.
• Test REST APIs, microservices, and modern web architectures.
• Support red team exercises when required.
• Engage with clients to understand testing scope and architecture.

Skills

Communication skills

Analytical mindset

Teamwork

Willingness to travel (GCC)

Education

Bachelor's degree in Computer Science/Cybersecurity or related field

Cybersecurity certifications (OSCP/OSWE/CEH)

Tools

Burp Suite

OWASP ZAP

Metasploit

MobSF

Frida

Job description

Job Summary

We are looking for a highly skilled and motivated Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. The successful candidate will be responsible for identifying vulnerabilities, simulating real-world attacks, and supporting clients in strengthening their application security posture.

This role requires strong technical expertise, hands-on experience in offensive security, and the ability to clearly communicate findings to both technical and non-technical stakeholders.

Key Responsibilities

Web & Mobile Application Security Testing

• Perform black-box, grey-box, and white-box penetration testing on web and mobile applications
• Identify, exploit, and document vulnerabilities in accordance with industry standards (e.g., OWASP Top 10, OWASP Mobile Top 10)
• Conduct secure code reviews when required

Vulnerability Analysis & Reporting

• Analyse vulnerabilities and assess their business and technical impact
• Produce detailed and high-quality penetration testing reports, including:
• Executive summaries
• Technical findings
• Risk ratings and remediation recommendations
• Present findings to clients and support remediation discussions

Offensive Security Activities

• Perform advanced testing techniques such as authentication bypass, session management attacks, API testing, and mobile reverse engineering
• Test REST APIs, microservices, and modern web architectures
• Support red team exercises when required

Tools & Methodologies

• Use industry-standard tools such as Burp Suite, OWASP ZAP, Metasploit, MobSF, Frida, and others
• Develop custom scripts or tools to support testing activities
• Follow structured methodologies and frameworks (OWASP, PTES, etc.)

Client Engagement & Support

• Interact directly with clients to understand application architecture and testing scope
• Provide clear and actionable remediation guidance
• Support re-testing and validation of fixes

Knowledge Development & Research

• Stay up to date with emerging vulnerabilities, attack techniques, and security trends
• Contribute to internal knowledge sharing, labs, and research initiatives
• Participate in training, certifications, and cybersecurity events

Required Hard Skills

• Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• Minimum 2 years of experience in application security testing (web and/or mobile)
• Strong knowledge of web technologies (HTTP/S, APIs, authentication mechanisms, etc.)
• Experience with mobile platforms (iOS, Android) and related security risks
• Hands-on experience with penetration testing tools (Burp Suite, etc.)
• Solid understanding of OWASP Top 10 and secure coding practices
• Strong reporting and communication skills in English

Required Soft Skills

• Residence in UAE
• Relevant certifications (e.g., OSCP, OSWE, eWPT, eMAPT, CEH)
• Experience with mobile app reverse engineering (Frida, Objection, JADX, etc.)
• Familiarity with cloud environments and API security testing
• Experience working with clients in the GCC region
• Strong analytical mindset and attention to detail
• Excellent interpersonal and teamwork abilities
• Flexibility and composure under stressful situations
• Willingness to travel within the GCC for on-site engagements if required
• Excellent communication skills in English (Arabic is a strong advantage)

Why Join Us?

• Opportunity to work in a growing cybersecurity environment
• Collaborative and dynamic team culture
• Real impact on security operations and client success

Be part of a high-impact cybersecurity team in one of the world's most dynamic digital regions.