Onsite Senior Security Consultant – Muscat (1-Year Contract)

Robotico Digital Llp; Oman; On-site; OMR 23,000 - 46,000; Full time

Job summary

Robotico Digital Llp is seeking a Senior Security Consultant to lead penetration testing across apps, APIs, containers and cloud environments in Muscat. You will assess security controls, perform threat modelling and coordinate vendor testing with cross-functional teams.

The role requires 7-9+ years in cybersecurity, banking/financial services exposure and hands-on testing across modern tech stacks including Istio/Kubernetes. Onsite, 1-year initial contract.

Qualifications

• The Senior Security Consultant conducts penetration testing and security assessments for projects and change requests.
• Assessments cover applications, APIs, infrastructure, networks, containers and Kubernetes environments.
• Identify vulnerabilities, risks and remediation; validate actions; support regulatory requirements.

Responsibilities

• Perform web, mobile, API, network, container and Kubernetes penetration testing.
• Conduct Istio service mesh security assessments.
• Review OS, databases, firewalls and network-device configurations.
• Assess security architecture, configurations, vulnerabilities and risks.
• Conduct threat modelling, security assessments and risk workshops.
• Coordinate internal and external penetration-testing vendors; manage test planning, access, findings validation, remediation and retesting.
• Support security tool PoCs and evaluate their effectiveness.
• Prepare technical assessments, executive summaries, risk ratings and remediation recommendations.
• Engage with development, infrastructure, cloud and information security teams.
• Track remediation and validate closure of findings.

Skills

Web application security

Grey-box testing

OWASP Top 10

SQL injection

XSS

CSRF

SSRF

IDOR

Authentication & session management

Mobile application security

Android

iOS

Secure storage

Certificate pinning

Reverse engineering

Root/jailbreak detection

OWASP Mobile Top 10

API security

JWT

Authentication

Authorization

Rate limiting

mTLS

BOLA

Data exposure

Business logic

RBAC

Privilege escalation

Container security

Kubernetes security

Istio service mesh

Network penetration testing

Configuration reviews

Threat modelling

Vulnerability management

Job description

Robotico Digital Llp is seeking a Senior Security Consultant to lead penetration testing across apps, APIs, containers and cloud environments in Muscat. You will assess security controls, perform threat modelling and coordinate vendor testing with cross-functional teams.

The role requires 7-9+ years in cybersecurity, banking/financial services exposure and hands-on testing across modern tech stacks including Istio/Kubernetes. Onsite, 1-year initial contract.