Senior Cybersecurity Assurance & Penetration Expert

CCDS; Riyadh; On-site; SAR 240,000 - 480,000; Full time

Job summary

CCDS in Riyadh, Saudi Arabia, seeks a seasoned cybersecurity professional for a 13-month, on-site project to perform penetration testing and assurance across networks, apps, and cloud environments. You will plan tests, conduct recon, exploit where appropriate, validate remediations, and deliver technical and executive reports with actionable guidance.

You will present findings to technical owners and stakeholders, retest closures, monitor trends, and contribute to security-process improvements

Qualifications

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral-movement testing.
• Simulate realistic attack scenarios while following rules of engagement and protecting service availability and data.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and contribute to continuous improvement of security-assurance processes.

Responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral movement testing.
• Simulate realistic attack scenarios while following approved rules of engagement and protecting service availability and data.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and contribute to continuous improvement of security-assurance processes.

Skills

Penetration testing

Cybersecurity assurance

Threat modeling

Vulnerability assessment

OWASP testing

MITRE ATT&CK

Education

Bachelor's degree in Computer Science or Information Security

Tools

OWASP

MITRE ATT&CK

Job description

CCDS in Riyadh, Saudi Arabia, seeks a seasoned cybersecurity professional for a 13-month, on-site project to perform penetration testing and assurance across networks, apps, and cloud environments. You will plan tests, conduct recon, exploit where appropriate, validate remediations, and deliver technical and executive reports with actionable guidance.

You will present findings to technical owners and stakeholders, retest closures, monitor trends, and contribute to security-process improvements