Senior Security Consultant

NowWiN International; Muscat; On-site; OMR 18,000 - 30,000; Full time

Job summary

NowWiN International is seeking a Senior Security Consultant in Muscat, Oman. The role focuses on hands-on penetration testing, vulnerability assessments, and risk analysis across web, mobile, API, network, container, and Kubernetes environments, with a preference for the banking and financial services sector.

The ideal candidate has 7–9+ years of relevant experience, strong communication, and the ability to relocate and work full-time onsite in Muscat.

Qualifications

• 7–9+ years of cybersecurity and penetration testing experience.
• Hands-on testing across web, mobile, API, and network security.
• Experience in container/Kubernetes security assessments.
• BFSI/digital banking or payment systems experience.
• Excellent communication and stakeholder management.

Responsibilities

• Conduct penetration testing and vulnerability assessments across web, mobile, API, network, containers, and Kubernetes.
• Perform security risk analysis and threat modelling.
• Produce assessment reports with remediation guidance.
• Engage with stakeholders and support security strategy in banking domain.

Skills

Penetration Testing

Web Security

API Security

Mobile Security

Kubernetes Security

Threat Modelling

Risk Analysis

Communication

Stakeholder Management

Banking Security

Tools

Burp Suite

OWASP ZAP

Kali Linux

Nessus

Nmap

Job description

We're Hiring: Senior Security Consultant

Experience: 7–9+ Years

Work Mode: Full-time, Onsite

Notice Period: Immediate to 15 Days Preferred

Relocation: Must be willing to relocate to Muscat, Oman

Location: Muscat, Oman

Role Overview

We are looking for an experienced Senior Security Consultant with strong hands‑on expertise in penetration testing, vulnerability assessment, and security risk analysis. The candidate should have experience assessing web, mobile, API, network, container, and Kubernetes environments, preferably within the banking and financial services domain.

Key Skills Required

• Web Application Penetration Testing and OWASP Top 10
• Mobile Application Security Testing (Android/iOS)
• API and Microservices Security
• Network Penetration Testing
• Container and Kubernetes Security
• Istio Service Mesh Security
• Infrastructure and Configuration Security Reviews
• Threat Modelling, Vulnerability Assessment and Remediation
• Security Assessment Reporting and Risk Analysis
• Banking, Digital Banking and Payment Systems Security

Mandatory Requirements

• 7–9+ years of relevant cybersecurity and penetration-testing experience.
• Hands-on experience in web, mobile, API, and network security testing.
• Experience in container/Kubernetes security assessments.
• Banking/BFSI, digital banking, or payment systems experience.
• Excellent communication and stakeholder-management skills.
• Willingness to relocate and work full-time onsite in Muscat, Oman.

Preferred Certifications

OSCP | OSEP | OSWE | CREST | CISSP | CISM | CCSP | GWAPT | GPEN | CKS