Freelance Penetration Tester (Ethical Hacker)

Alpha Data Recruitment; Riyadh; On-site; SAR 120,000 - 150,000; Part time

Job summary

A leading recruitment company in Saudi Arabia is seeking a Freelance Penetration Tester. You will conduct security assessments through simulated cyberattacks, delivering insights to strengthen client cybersecurity. Ideal candidates have over 7 years of experience in penetration testing and are fluent in English. This is an on-site, contract-based role with flexible working hours.

Qualifications

• 7+ years of experience in freelance or contract-based penetration testing.
• Strong knowledge of OWASP Top 10 and networking protocols.
• Fluent in English, both written and verbal.

Responsibilities

• Conduct penetration tests on various applications and networks.
• Perform vulnerability assessments using automated and manual techniques.
• Deliver detailed reports with findings and remediation steps.

Skills

Penetration testing

Communication

Risk assessment

Vulnerability assessment

Tools

Burp Suite

Metasploit

Nmap

Nessus

Wireshark

SQLMap

Job description

Overview

Job Summary: We are seeking a highly skilled Freelance Penetration Tester to perform security assessments on a project-by-project basis. As a freelance ethical hacker, you will simulate real-world cyberattacks to uncover vulnerabilities in systems, networks, and applications. Your insights will directly support the improvement of our clients’ cybersecurity posture by identifying risks before malicious actors can exploit them.

This is a On -site, contract-based role with flexible working hours, ideal for professionals who prefer autonomy and variety in their work.

Responsibilities

• Conduct penetration tests on web applications, APIs, mobile apps, networks, and cloud environments.
• Perform vulnerability assessments using both automated tools and manual techniques.
• Simulate real-world attack scenarios to identify exploitable weaknesses.
• Deliver clear, well-structured reports detailing findings, risk ratings, and actionable remediation steps.
• Communicate technical findings to both technical and non-technical stakeholders.
• Stay updated on the latest vulnerabilities, exploits, and attack vectors.
• (Optional) Conduct social engineering or phishing simulation tests as requested by the client.

Skills

Requirements

• Proven experience in freelance or contract-based penetration testing (7+ years preferred).
• Strong knowledge of:
• OWASP Top 10, network protocols, web technologies, operating systems (Linux/Windows), and cloud platforms.
• Proficiency with tools such as:
• Burp Suite, Metasploit, Nmap, Nessus, Wireshark, SQLMap, etc.
• Ability to deliver high-quality work independently with minimal supervision.
• Fluent in English (both written and verbal).

Certifications

• OSCP, CEH, GPEN, PNPT, or similar recognized offensive security certifications.

Working Conditions

• Type: Freelance / Project-Based
• Location: On-Site
• Working Hours: Flexible, based on project deadlines
• Compensation: Per project or hourly (negotiable)