Senior Security Pen Tester – Web, Mobile & Cloud

AGAPI; Dubai; On-site; AED 279,000 - 502,000; Full time

Benefits offered by this job

Competitive Compensation

Top-Tier Equipment

Growth & Oppotunity

Thriving Culture

Job summary

AGAPI is seeking a Security Tester to perform advanced, hands-on security testing across web, mobile, API, cloud, and internal systems. You will chain vulnerabilities into realistic attack paths and deliver detailed reports with actionable remediation guidance.

The role emphasizes evidence-driven demonstrations, practical exploitation scenarios, and clear communication to strengthen the organization’s security posture and defense strategies.

Qualifications

• 4+ years of hands-on penetration testing experience.
• Proficiency in web application security, OWASP Top 10 and advanced issues.
• Strong mobile security skills (iOS/Android) with Frida and MobSF.
• Cloud security knowledge in AWS/GCP, IAM misconfigurations and privilege escalation.
• Burp Suite Pro proficiency; scripting in Python, Bash or PowerShell.

Responsibilities

• Execute advanced, hands-on penetration testing across web, mobile, API, cloud, and internal systems.
• Chain vulnerabilities into realistic attack paths with evidence-based demonstrations.
• Deliver polished reports outlining methodologies, impact and remediation guidance.
• Provide recommendations aligned with architecture and feasible for engineering teams.
• Contribute to improving the organization’s overall security posture and defenses.
• Perform additional security tasks as directed by the Line Manager.

Skills

Web application security

OWASP Top 10

Mobile security

Cloud security AWS/GCP

Burp Suite Pro

Frida

MobSF

Python

Bash

PowerShell

GraphQL

IAM misconfigurations

Tools

Burp Suite Pro

Frida

MobSF

Python

Bash

PowerShell

Job description

AGAPI is seeking a Security Tester to perform advanced, hands-on security testing across web, mobile, API, cloud, and internal systems. You will chain vulnerabilities into realistic attack paths and deliver detailed reports with actionable remediation guidance.

The role emphasizes evidence-driven demonstrations, practical exploitation scenarios, and clear communication to strengthen the organization’s security posture and defense strategies.