Senior Cybersecurity Assurance & Penetration Tester

CCDS; Riyadh; On-site; SAR 240,000 - 480,000; Full time

Job summary

CCDS in Riyadh is seeking a senior penetration tester to provide technical cybersecurity assurance through controlled engagements and risk-based reporting. This 13-month project-based role requires strong hands-on expertise across networks, applications, and cloud environments.

You will plan, execute, and validate findings, deliver clear technical reports and executive summaries, and collaborate with system owners to verify remediation and close findings efficiently.

Qualifications

• 7+ years of experience in penetration testing and cybersecurity assurance.
• Strong knowledge of network, web, infrastructure, and cloud attack surfaces.
• Experience with MITRE ATT&CK and OWASP testing methodologies.

Responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral-movement testing.
• Simulate realistic attack scenarios while following approved rules of engagement and protecting service availability and data.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and contribute to continuous improvement of security-assurance processes.

Skills

Penetration testing

Cybersecurity assurance

Ethical hacking

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Job description

CCDS in Riyadh is seeking a senior penetration tester to provide technical cybersecurity assurance through controlled engagements and risk-based reporting. This 13-month project-based role requires strong hands-on expertise across networks, applications, and cloud environments.

You will plan, execute, and validate findings, deliver clear technical reports and executive summaries, and collaborate with system owners to verify remediation and close findings efficiently.