Senior Penetration Tester: Offensive Security & DevSecOps Lead

Toptal; Dubai; On-site; AED 350,000 - 600,000; Full time

Job summary

Toptal is seeking a Senior Penetration Tester to lead advanced offensive security engagements across applications, cloud, and infrastructure. You will shape secure architecture, embed security into DevSecOps, and run red team exercises to map attack paths and prevent the next breach.

You will communicate risk clearly to stakeholders, mentor teams, and drive security improvements across CI/CD pipelines, ensuring robust controls and automated testing across environments.

Qualifications

• 7–10 years in cybersecurity with strong hands-on penetration testing experience.
• Proven experience in web, API, cloud, and infrastructure penetration testing.
• Experience with red teaming, adversary simulation, or advanced attack techniques.
• Strong understanding of application security and common vulnerability classes (OWASP Top 10, etc.).
• Hands-on experience integrating security into DevOps/CI-CD pipelines.
• Strong stakeholder communication skills, with the ability to explain technical risk in business terms.
• Bachelor's degree required; Honours or Master's degree preferred.

Responsibilities

• Plan and execute penetration tests across applications, APIs, cloud platforms, and infrastructure.
• Conduct red teaming and adversary emulation aligned to real-world threat scenarios.
• Identify, exploit, and document vulnerabilities with clear risk articulation.
• Perform post-exploitation analysis to assess blast radius and business impact.
• Validate remediation effectiveness through re-testing.
• Continuously improve testing methodologies, tooling, and attack coverage.
• Design and review secure architectures for cloud-native and on-premise solutions.
• Provide security input into system design, aligned with enterprise standards.
• Evaluate and recommend security controls and technologies.
• Act as SME for application and cloud security design decisions.
• Embed security controls into CI/CD pipelines (SAST, DAST, SCA, IaC scanning).
• Automate security testing and control validation processes.
• Partner with engineering teams to integrate security into development workflows.
• Develop scripts and tools to support scalable security testing and monitoring.

Skills

Penetration testing

Red team / adversary simulation

Cloud security

Application security

DevSecOps integration

Stakeholder communication

Education

Bachelor's degree

Honours or MSc preferred

Tools

SAST tooling experience

DAST tooling

IaC scanning

Job description

Toptal is seeking a Senior Penetration Tester to lead advanced offensive security engagements across applications, cloud, and infrastructure. You will shape secure architecture, embed security into DevSecOps, and run red team exercises to map attack paths and prevent the next breach.

You will communicate risk clearly to stakeholders, mentor teams, and drive security improvements across CI/CD pipelines, ensuring robust controls and automated testing across environments.