Senior Cyber Operations & Penetration Lead

Total-TECH Co.; Riyadh; On-site; SAR 120,000 - 180,000; Full time

Job summary

Total-TECH Co. in Riyadh is seeking a seasoned security specialist to join our team.

The role focuses on hands-on testing, security operations, risk assessment, and improvements across applications, networks, and infrastructure. You will lead compromise assessments, threat hunting, incident analysis, and secure code reviews within DevSecOps pipelines, collaborating with development, infrastructure, and SOC teams to remediate issues.

Qualifications

• Proven experience with penetration testing methodologies and tools.
• Strong understanding of security operations, system hardening, and configuration management.
• Hands-on experience with compromise assessment and incident response activities.
• Proficiency in security code review within DevSecOps pipelines.
• Knowledge of OWASP, CVEs, and MITRE ATT&CK frameworks.
• Ability to analyze complex security issues and communicate findings clearly.

Responsibilities

• Conduct penetration testing across applications, networks, and infrastructure.
• Perform security operations reviews to ensure alignment with best practices.
• Lead compromise assessments, threat hunting, incident analysis, and impact evaluation.
• Review secure code in DevSecOps pipelines to identify security flaws.
• Collaborate with development, security, and operations teams to remediate issues.
• Document findings and provide risk assessments and mitigation recommendations.
• Support continuous improvement of cyber defense processes and tooling.

Skills

Penetration Testing

Security Operations

Compromise Assessments

Secure Code Reviews

DevSecOps

Threat Hunting

Incident Analysis

Communication of Findings

Tools

OWASP

CVEs

MITRE ATT&CK

Job description

Total-TECH Co. in Riyadh is seeking a seasoned security specialist to join our team.

The role focuses on hands-on testing, security operations, risk assessment, and improvements across applications, networks, and infrastructure. You will lead compromise assessments, threat hunting, incident analysis, and secure code reviews within DevSecOps pipelines, collaborating with development, infrastructure, and SOC teams to remediate issues.