Web & Mobile Penetration Tester | Offensive Security Expert

herewego; Dubai; Sur place; AED 180 000 - 300 000; Plein temps

Résumé du poste

herewego is seeking a highly skilled Penetration Tester specializing in Web and Mobile applications to join our cybersecurity offensive team. You will identify vulnerabilities, simulate real-world attacks, and support clients in strengthening their application security posture.

You will work hands-on with Burp Suite, OWASP ZAP, MobSF and Frida, delivering clear remediation guidance and actionable reports to diverse stakeholders across the GCC region.

Qualifications

• Degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Minimum 2 years of experience in application security testing (web and/or mobile).
• Strong knowledge of web technologies (HTTP/S, APIs, authentication mechanisms).
• Experience with mobile platforms (iOS, Android) and related security risks.
• Hands-on experience with penetration testing tools (Burp Suite, etc.).
• Solid understanding of OWASP Top 10 and secure coding practices.
• Strong reporting and communication skills in English.

Responsabilités

• Web & Mobile Application Security Testing: perform black-box, grey-box, and white-box testing on web/mobile apps; identify and document vulnerabilities; secure code reviews when required.
• Vulnerability Analysis & Reporting: analyze vulnerabilities, assess business/technical impact; produce executive summaries, technical findings, risk ratings, and remediation recommendations; present findings to clients.
• Offensive Security Activities: perform authentication bypass, session management attacks, API testing, mobile reverse engineering; test REST APIs and microservices; support red team exercises.
• Tools & Methodologies: use Burp Suite, OWASP ZAP, Metasploit, MobSF, Frida; develop scripts/tools; follow OWASP/PTES frameworks.
• Client Engagement & Support: interact with clients to understand scope; provide remediation guidance; support re-testing and validation.
• Knowledge Development & Research: stay updated on vulnerabilities and trends; contribute to internal labs and research; participate in training.
• Required Soft Skills: stay client-focused, communicate clearly, collaborate effectively; willingness to travel within GCC.

Connaissances

Web security testing

Mobile security

OWASP Top 10 knowledge

Threat analysis

Reporting & communication

Formation

Degree in Computer Science/Cybersecurity or related field

Outils

Burp Suite

OWASP ZAP

Metasploit

MobSF

Frida

Objection

JADX

Description du poste

herewego is seeking a highly skilled Penetration Tester specializing in Web and Mobile applications to join our cybersecurity offensive team. You will identify vulnerabilities, simulate real-world attacks, and support clients in strengthening their application security posture.

You will work hands-on with Burp Suite, OWASP ZAP, MobSF and Frida, delivering clear remediation guidance and actionable reports to diverse stakeholders across the GCC region.