Penetration Tester — Web, API & Cloud Security

Managed; Riyadh; On-site; SAR 130,000 - 230,000; Full time

Job summary

Managed is seeking a hands-on Penetration Tester to conduct security assessments, identify vulnerabilities, and provide practical remediation recommendations across client environments. You will deliver clear technical reports and collaborate with clients and internal teams.

The ideal candidate has 2–3 years of practical experience in offensive security, strong testing skills, and fluency in reporting risk and remediation steps. On-site work in Riyadh is required.

Qualifications

• 2–3 years of practical penetration testing or offensive security experience.
• Hands-on testing of web apps, APIs, networks, and cloud environments.
• Strong knowledge of vulnerability assessment and exploitation techniques.
• Proficient in Python, Bash, PowerShell, Ruby, or equivalent scripting.
• Solid understanding of TCP/IP, DNS, HTTP, and OWASP Top 10.

Responsibilities

• Conduct penetration testing across web apps, APIs, networks, infrastructure and cloud.
• Perform manual and automated vulnerability assessments.
• Safely exploit identified vulnerabilities to assess impact.
• Test authentication, authorization, sessions, and app logic.
• Participate in red-team activities when required.
• Review source code for insecure practices and document findings.
• Present findings with evidence, risk ratings and remediation steps.
• Retest to verify remediation effectiveness and results.
• Stay updated on new vulnerabilities and tooling.

Skills

Penetration testing

Vulnerability assessment

Technical reporting

Scripting (Python/Bash/PowerShell)

Linux/Windows

OWASP Top 10

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Nessus

Job description

Managed is seeking a hands-on Penetration Tester to conduct security assessments, identify vulnerabilities, and provide practical remediation recommendations across client environments. You will deliver clear technical reports and collaborate with clients and internal teams.

The ideal candidate has 2–3 years of practical experience in offensive security, strong testing skills, and fluency in reporting risk and remediation steps. On-site work in Riyadh is required.