Onsite Penetration Tester (Riyadh)

AIQU; Riyadh; Presencial; SAR 180 000 - 240 000; Tempo integral

Resumo da oferta

AIQU is seeking an onsite outsourced penetration tester in Riyadh to identify and document security vulnerabilities, assess weaknesses via controlled exploitation, and prepare detailed risk-based reports with remediation recommendations.

The role includes retesting after remediation, supporting vulnerability assessment activities, and linking findings to the Cybersecurity Risk Register to improve the organization's security posture.

Responsabilidades

• Identify, validate, and document security vulnerabilities.
• Assess security weaknesses through controlled exploitation techniques.
• Prepare detailed penetration testing reports, including risk ratings, technical evidence, business impact, and remediation recommendations.
• Conduct retesting after remediation to validate the effectiveness of corrective actions.
• Support vulnerability assessment and security testing activities.
• Provide recommendations to strengthen security controls and reduce exposure to cyber threats.
• Link identified vulnerabilities and penetration testing findings with the organization’s Cybersecurity Risk Register.
• Assess the risk impact of identified vulnerabilities and support the classification of findings based on likelihood, impact, and overall risk level.
• Coordinate with relevant teams to follow up on risk treatment plans, remediation actions, and closure status.
• Support risk owners in understanding technical findings, associated risks, and required mitigation actions.
• Track open findings and ensure proper documentation of remediation, risk acceptance, or compensating controls.
• Provide technical input to support cybersecurity risk management activities and improve the organization’s overall security posture.

Descrição da oferta de emprego

AIQU is seeking an onsite outsourced penetration tester in Riyadh to identify and document security vulnerabilities, assess weaknesses via controlled exploitation, and prepare detailed risk-based reports with remediation recommendations.

The role includes retesting after remediation, supporting vulnerability assessment activities, and linking findings to the Cybersecurity Risk Register to improve the organization's security posture.