Penetration Tester - Cloud, Web & Red Team Expert

NOZOM; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

NOZOM is seeking an Information Security Specialist with hands-on penetration testing experience to assess networks, applications, endpoints, wireless environments, and cloud platforms for vulnerabilities and remediation guidance.

The candidate will conduct tests across internal networks, web apps, endpoints, and cloud environments, identify vulnerabilities, and document findings. Strong reporting and Arabic fluency are required.

Qualifications

• Bachelor’s degree in CS, cybersecurity, or related field required.
• 3+ years of relevant information security services experience.
• Fluency in Arabic required.
• Experience in vulnerability assessment, exploitation, web app testing, and network protocol analysis.
• Knowledge of cloud security assessment and privilege escalation risks.
• Strong technical reporting, documentation and communication skills.
• Certifications such as OSCP, GPEN, GWAPT, GXPN, eCPPT, eWPT, or eWPTX preferred.

Responsibilities

• Conduct penetration testing for internal networks, web apps, endpoints, wireless networks, and cloud environments.
• Identify, exploit, validate, and document security vulnerabilities.
• Perform secure code reviews and identify authentication flaws, hardcoded credentials, and insecure logic.
• Participate in advanced Red Team exercises and multi-stage attack simulations.
• Assess cloud platforms including AWS, Azure, GCP, and Oracle.
• Prepare detailed technical and executive reports and present findings to stakeholders.

Education

Bachelor’s degree in Computer Science, Cybersecurity, or a related field

Tools

AWS

Azure

GCP

Oracle

Job description

NOZOM is seeking an Information Security Specialist with hands-on penetration testing experience to assess networks, applications, endpoints, wireless environments, and cloud platforms for vulnerabilities and remediation guidance.

The candidate will conduct tests across internal networks, web apps, endpoints, and cloud environments, identify vulnerabilities, and document findings. Strong reporting and Arabic fluency are required.