Senior Penetration Tester: App Security & AD Expert

Cytomate; Doha; Vor Ort; QAR 240.000 - 360.000; Vollzeit

Zusammenfassung

Cytomate in Doha, Qatar is seeking a Senior Penetration Tester to conduct comprehensive security assessments across web apps, networks, and AD environments. You will identify vulnerabilities, validate findings, and deliver remediation guidance to strengthen security posture.

The role requires 5+ years of experience, strong knowledge of application security testing, SAST/DAST, and reporting. Collaboration with cross-functional teams and periodic retesting are expected.

Qualifikationen

• Minimum 5 years of hands-on penetration testing experience.
• Strong experience in application security testing and risk reporting.
• Ability to conduct testing within defined scopes and rules of engagement.
• Excellent written and verbal communication for detailed reporting.

Aufgaben

• Penetration testing of web applications, APIs, and other application environments.
• Perform application security assessments using SAST and DAST tools.
• Conduct manual source code reviews to identify security flaws.
• Conduct internal and external network penetration testing to identify vulnerabilities.
• Perform Active Directory security assessments including enumeration and privilege escalation.
• Test thick-client and thin-client applications and their authentication.
• Conduct OSINT to identify exposed assets and attack surfaces.
• Identify, validate exploits, and document vulnerabilities with evidence.
• Assess authentication, authorization, session management, and access controls.
• Use standard tools and methodologies for security assessments.
• Prepare detailed reports with findings, risk ratings, PoCs, and remediations.
• Collaborate with dev, infra, and security teams for remediation.

Kenntnisse

Application Security

SAST/DAST

Source Code Analysis

Active Directory

Network Pen Testing

OSINT

Reporting

Retesting

OWASP Top 10

Ausbildung

Bachelor's degree in CS/Cybersecurity

Security certifications (adv)

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

Mimikatz

CodeQL/Semgrep

Maltego

Jobbeschreibung

Cytomate in Doha, Qatar is seeking a Senior Penetration Tester to conduct comprehensive security assessments across web apps, networks, and AD environments. You will identify vulnerabilities, validate findings, and deliver remediation guidance to strengthen security posture.

The role requires 5+ years of experience, strong knowledge of application security testing, SAST/DAST, and reporting. Collaboration with cross-functional teams and periodic retesting are expected.