Penetration Tester

cander; Dubai; On-site; AED 260,000 - 380,000; Full time

Job summary

cander in Dubai, UAE is seeking a Senior Penetration Tester to join a high-performing Security Delivery team. You will lead end-to-end pentesting across web, API, mobile, cloud, and infrastructure, including AI/LLM environments, delivering actionable findings to engineering teams and leadership.

Ideal candidates have 5+ years of hands-on experience, CREST certifications preferred, and strong skills with Burp Suite, Metasploit, BloodHound, and Kubernetes.

Qualifications

• 5+ years of hands-on penetration testing experience.
• CREST certification (CCT INF / CCT APP preferred).
• Strong expertise with Burp Suite Pro, Metasploit, BloodHound, Impacket, Active Directory, Kubernetes, CI/CD security and cloud platforms.

Responsibilities

• Lead end-to-end penetration testing engagements across web, API, mobile, cloud, infrastructure, and AI/LLM environments.
• Conduct advanced manual exploitation and threat-led security assessments.
• Deliver high-quality technical reports with practical remediation recommendations.
• Present findings and risk assessments to engineering teams, executive leadership, and government stakeholders.

Skills

Penetration testing

Threat-led assessments

Report writing

Risk communication

Tools

Burp Suite Professional

Metasploit

BloodHound

Impacket

Active Directory

Kubernetes

CI/CD security

Cloud platforms

Job description

We're Hiring | Senior Penetration Tester

Location: Dubai, UAE

Employment Type: Full-time | 1-Year Renewable Contract (subject to business requirements)

We're looking for a Senior Penetration Tester to join a high-performing Security Delivery team in Dubai.

In this role, you'll lead complex security assessments across modern enterprise environments, working on challenging engagements involving web applications, APIs, cloud platforms, Active Directory, mobile applications, infrastructure, and AI/LLM-based systems.

What you'll be doing:

• Lead end-to-end penetration testing engagements across web, API, mobile, cloud, infrastructure, and AI/LLM environments.
• Conduct advanced manual exploitation and threat-led security assessments.
• Deliver high-quality technical reports with practical remediation recommendations.
• Present findings and risk assessments to engineering teams, executive leadership, and government stakeholders.

We're looking for:

• 5+ years of hands-on penetration testing experience.
• CREST certification (CCT INF / CCT APP preferred).
• Strong expertise with Burp Suite Professional, Metasploit, BloodHound, Impacket, Active Directory, Kubernetes, CI/CD security, and cloud platforms.
• Experience delivering security assessments within regulated industries such as government, financial services, or healthcare.

Nice to have:

• OSCP, OSEP, GPEN, or GXPN certifications.
• AI & LLM security testing experience.
• Knowledge of UAE cybersecurity frameworks (TDRA IAS, DCSS, UAE IA, ADHICS).
• Arabic language skills.

If you're looking to work on cutting-edge offensive security projects and contribute to securing critical organizations across the region, we'd love to hear from you.