Penetration Tester

NOZOM; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

NOZOM is seeking an Information Security Specialist with hands-on penetration testing experience to assess networks, applications, endpoints, wireless environments, and cloud platforms for vulnerabilities and remediation guidance.

The candidate will conduct tests across internal networks, web apps, endpoints, and cloud environments, identify vulnerabilities, and document findings. Strong reporting and Arabic fluency are required.

Qualifications

• Bachelor’s degree in CS, cybersecurity, or related field required.
• 3+ years of relevant information security services experience.
• Fluency in Arabic required.
• Experience in vulnerability assessment, exploitation, web app testing, and network protocol analysis.
• Knowledge of cloud security assessment and privilege escalation risks.
• Strong technical reporting, documentation and communication skills.
• Certifications such as OSCP, GPEN, GWAPT, GXPN, eCPPT, eWPT, or eWPTX preferred.

Responsibilities

• Conduct penetration testing for internal networks, web apps, endpoints, wireless networks, and cloud environments.
• Identify, exploit, validate, and document security vulnerabilities.
• Perform secure code reviews and identify authentication flaws, hardcoded credentials, and insecure logic.
• Participate in advanced Red Team exercises and multi-stage attack simulations.
• Assess cloud platforms including AWS, Azure, GCP, and Oracle.
• Prepare detailed technical and executive reports and present findings to stakeholders.

Education

Bachelor’s degree in Computer Science, Cybersecurity, or a related field

Tools

AWS

Azure

GCP

Oracle

Job description

Job Title: Information Security Specialist – Penetration Tester

Job Description:

NOZOM is seeking an Information Security Specialist with hands-on experience in penetration testing. The successful candidate will assess networks, applications, endpoints, wireless environments, and cloud platforms to identify security vulnerabilities and provide effective remediation recommendations.

Key Responsibilities:

• Conduct penetration testing for internal networks, web applications, endpoints, wireless networks, and cloud environments.
• Identify, exploit, validate, and document security vulnerabilities.
• Perform secure code reviews and identify authentication flaws, hardcoded credentials, and insecure logic.
• Participate in advanced Red Team exercises and multi-stage attack simulations.
• Assess cloud platforms, including AWS, Azure, GCP, and Oracle.
• Prepare detailed technical and executive reports.
• Present findings to stakeholders and support remediation validation.

Qualifications and Requirements:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 3 years of relevant experience in information security services.
• Fluency in Arabic is required.
• Experience in vulnerability assessment, exploitation, web application testing, and network protocol analysis.
• Knowledge of cloud security assessment and privilege escalation risks.
• Strong technical reporting, documentation, and communication skills.
• One or more of the following certifications is preferred: OSCP, GPEN, GWAPT, GXPN, eCPPT, eWPT, or eWPTX.