Senior Cybersecurity Assurance & Pen Testing Expert

Cloud Consultancy - CCDS; Riyadh; On-site; SAR 180,000 - 300,000; Part time

Job summary

Cloud Consultancy - CCDS is seeking an experienced cybersecurity professional for a 13-month on-site project in Riyadh. The role focuses on penetration testing, vulnerability validation, remediation verification, and risk-based reporting across networks, systems, and cloud environments.

The candidate will lead testing efforts, produce technical and executive reports, and advise on remediation with clear business impact.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 7+ years of experience in penetration testing or cybersecurity assurance.
• Strong understanding of OWASP, network and cloud attack surfaces.

Responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral movement testing.
• Simulate realistic attack scenarios while following approved rules of engagement and protecting service availability and data.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and contribute to continuous improvement of security-assurance processes.

Skills

Penetration testing

Cybersecurity assurance

Ethical hacking

Executive reporting

MITRE ATT&CK knowledge

Education

Bachelor's degree in Computer Science, Information Security, or related field

Job description

Cloud Consultancy - CCDS is seeking an experienced cybersecurity professional for a 13-month on-site project in Riyadh. The role focuses on penetration testing, vulnerability validation, remediation verification, and risk-based reporting across networks, systems, and cloud environments.

The candidate will lead testing efforts, produce technical and executive reports, and advise on remediation with clear business impact.