Cyber Operations Lead: Penetration Testing & Red Team

Deloitte Development LLC; Riyadh; On-site; SAR 180,000 - 320,000; Full time

Job summary

Deloitte Development LLC in Saudi Arabia seeks a Consultant – Manager to lead penetration testing engagements across web, mobile and networks. You will plan scopes, perform tests, and report findings with actionable remediation steps, coordinating with clients and internal teams to drive secure outcomes.

Qualifications include 2–7 years of hands-on testing, OSCP or similar, strong Burp Suite/Nmap/Metasploit/BloodHound skills, scripting, and excellent English reporting; Arabic is a plus.

Qualifications

• 2–7 years of hands-on penetration testing experience.
• Hands-on testing for real organisations, not just labs.
• Strong with Burp Suite, Nmap, Metasploit, BloodHound and post-exploitation tools.
• Scripting in Python, Bash or PowerShell.
• Excellent English report writing; Arabic is a plus.
• Recognised offensive certification (e.g. OSCP) for mid/senior levels.

Responsibilities

• Plan and scope engagements with system owners and tests.
• Conduct penetration tests on web apps, APIs, mobile apps, networks.
• Lead red and purple team exercises when requested.
• Write clear risk-based reports with remediation steps.
• Brief teams and management on results and business impact.

Skills

Penetration testing

Test planning

Client communication

Leadership

English report writing

Education

Bachelor's in cybersecurity or related field

Offensive security certification (OSCP, etc.)

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Deloitte Development LLC in Saudi Arabia seeks a Consultant – Manager to lead penetration testing engagements across web, mobile and networks. You will plan scopes, perform tests, and report findings with actionable remediation steps, coordinating with clients and internal teams to drive secure outcomes.

Qualifications include 2–7 years of hands-on testing, OSCP or similar, strong Burp Suite/Nmap/Metasploit/BloodHound skills, scripting, and excellent English reporting; Arabic is a plus.