Penetration Testing Specialist

Cipher | سايڤر; Riyadh; On-site; SAR 201,000 - 268,000; Full time

Job summary

Cipher | سايڤر, a Riyadh-based cybersecurity solutions provider, seeks an experienced Penetration Tester to define scope and objectives, perform manual testing across web, mobile, API, cloud, and enterprise infrastructure, and run advanced assessments including red team simulations.

You will deliver clear reports with risk analysis, present findings to technical and executive stakeholders, and translate technical results into business recommendations.

Qualifications

• Minimum 2+ years of hands-on experience in penetration testing and cybersecurity.
• Bachelor’s degree in computer science, Cybersecurity, IT, or related field.
• Certifications such as OSCP, eWPTX, CRTP (or equivalent) are highly preferred.
• Strong experience across web, mobile, cloud, and infrastructure security testing.
• Solid skills in manual vulnerability discovery, code review, and adversary simulation.
• Proficiency in scripting (Python, PowerShell, Bash).
• Strong analytical, problem-solving, and communication skills.
• Ability to translate technical findings into business risks and recommendations.

Responsibilities

• Define scope and objectives of penetration tests with clients across systems, applications, and environments.
• Perform manual penetration testing on web, mobile, APIs, cloud, and enterprise infrastructure.
• Conduct advanced assessments including source code reviews, business logic testing, and red team simulations.
• Simulate real-world attacks to evaluate detection and response capabilities.
• Identify vulnerabilities, misconfigurations, and security gaps (onsite & remote).
• Deliver clear, actionable technical reports with risk and business impact analysis.
• Present findings to both technical teams and executive stakeholders.
• Provide strategic recommendations to enhance security posture and reduce attack surface.
• Stay up to date with emerging threats and frameworks (OWASP, MITRE ATT&CK).

Skills

Penetration testing

Cybersecurity

Scripting (Python/PowerShell/Bash)

Adversary simulation

Communication

Education

Bachelor’s degree in Computer Science / Cybersecurity

Job description

Cipher | سايڤر is a cybersecurity solutions provider based in Riyadh, Saudi Arabia. The company's goal is to simplify the perception of complexity surrounding cybersecurity problems and solutions. Cipher's team of Saudi professionals and experts work tirelessly to develop, customize, and manage digital services and cybersecurity solutions to ensure their peace of mind. Our goal is to provide peace of mind to our clients by making digital security simple and efficient.

Key Responsibilities:

• Define scope and objectives of penetration tests with clients across systems, applications, and environments.
• Perform manual penetration testing on web, mobile, APIs, cloud, and enterprise infrastructure.
• Conduct advanced assessments including source code reviews, business logic testing, and red team simulations.
• Simulate real-world attacks to evaluate detection and response capabilities.
• Identify vulnerabilities, misconfigurations, and security gaps (onsite & remote).
• Deliver clear, actionable technical reports with risk and business impact analysis.
• Present findings to both technical teams and executive stakeholders.
• Provide strategic recommendations to enhance security posture and reduce attack surface.
• Stay up to date with emerging threats and frameworks (OWASP, MITRE ATT&CK).

Requirements:

• Minimum 2+ years of hands‑on experience** in penetration testing and cybersecurity.
• Bachelor’s degree in computer science, Cybersecurity, IT, or related field.
• Certifications such as **OSCP, eWPTX, CRTP** (or equivalent) are highly preferred.
• Strong experience across web, mobile, cloud, and infrastructure security testing.
• Solid skills in manual vulnerability discovery, code review, and adversary simulation.
• Proficiency in scripting (Python, PowerShell, Bash).
• Strong analytical, problem‑solving, and communication skills.
• Ability to translate technical findings into business risks and recommendations.