Penetration Tester

iConnect IT Business Solutions DMCC; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

iConnect IT Business Solutions DMCC in Dubai is seeking a Senior Penetration Tester to drive manual-first security testing across web, mobile, cloud, and infrastructure for clients in the UAE. You will deliver detailed, client-ready reports and maintain governance throughout engagements.

You will report findings with executive-style summaries and support testing dashboards. The role requires strong English communication, 4+ years of hands-on testing, and willingness to travel to client sites in

Qualifications

• 4+ years of hands-on, proven penetration testing experience.
• Experience across web/API, mobile, network/infrastructure, or cloud testing.
• Ability to present findings clearly in English to technical and executive audiences.

Responsibilities

• Run manual and tool-assisted penetration tests across web apps, mobile apps, infrastructure, and cloud.
• Test to Greybox/Whitebox and Blackbox approaches as required.
• Produce detailed client-ready reports with executive summaries and root-cause analysis.
• Maintain vulnerability registers and re-test remediations after fixes.
• Lead walkthroughs with client stakeholders and ensure QA to minimize false positives.

Skills

Penetration testing

Web/API testing

Mobile testing

Cloud testing

English communication

Education

Bachelor's degree in Computer Science / Information Security / related field

OSCP, OSCE, OSWE, GPEN or equivalent certification

Tools

Burp Suite

Acunetix

Nmap

Wireshark

Job description

Posted Jul 28, 2026 · Apply before Aug 16, 2026

We're looking for a Senior Penetration Tester to join our security testing practice. You'll deliver manual-first penetration testing engagements on web, mobile, infrastructure, cloud, VoIP, and Wi-Fi both internally and for clients across the UAE working within formal testing governance and producing high-quality, client-ready reporting.

Responsibilities

• Run manual and tool-assisted penetration tests across web applications, web services, mobile apps (iOS/Android), infrastructure, cloud, VoIP, and Wi-Fi — both external and internal exposure
• Test to Greybox/Whitebox and Blackbox
• Operate within approved rules-of-engagement / exploit-authorisation processes before any exploitation activity
• Escalate critical findings (RCE, SQLi, and similar) immediately, outside the standard reporting cycle
• Produce detailed, client-ready reports: executive summary, business-level conclusions, and per-finding detail (ID, severity, affected assets, root cause, evidence, business impact, recommendations, mitigations)
• Maintain vulnerability registers and log findings into vulnerability management platforms where integrations exist
• Retest remediated vulnerabilities and issue closure/certification reports
• Contribute to monthly status reporting and testing dashboards across active engagements
• Lead findings walkthroughs and planning calls with client stakeholders, in English
• Explain and reproduce reported vulnerabilities on request
• QA your own and peers' work to eliminate false positives/negatives before delivery

Requirements

• 4+ years of hands-on, proven penetration testing experience
• Strong practical skills across at least two of: web/API testing, mobile (iOS/Android), network/infrastructure, cloud (AWS/Azure)
• Comfortable with manual testing plus tooling such as Burp Suite, Acunetix, Nmap, and similar
• Excellent spoken and written English; confident presenting findings to technical and executive audiences alike
• Based in or willing to relocate to Dubai; able to travel to client sites as required

Qualifications

• OSCP, OSCE, OSWE, GPEN, or an equivalent recognised offensive security certification are strongly preferred
• Cloud or network certifications (AWS, Azure, or similar) a plus
• Bachelor's degree in Computer Science, Information Security, or a related field or equivalent practical experience
• Clean background suitable for formal verification (identity, right to work, education, employment history)

Apply for this position

Website

Full Name *

Email *

Phone *

Current Location *

LinkedIn URL

How did you hear about us?

CV / Resume * PDF or DOCX, max 5MB.

How many years of hands-on, professional penetration testing experience do you have? *

Do you hold OSCP, OSCE, OSWE, GPEN, or an equivalent certification? If yes, please specify which. *

Are you currently based in Dubai/UAE, or willing to relocate? *

Have you worked before under a formal rules-of-engagement or exploit-authorisation process? *

How would you rate your spoken and written English for client-facing technical presentations? *

Are you comfortable travelling to client sites across the UAE as needed? *

Are you willing to undergo background verification checks as part of onboarding? *

By submitting this application, I agree that iConnect may collect, store and process my personal data and CV for recruitment purposes, and may contact me about this and future job opportunities. See our Privacy Policy . *