Senior Offensive Security Consultant

IBM; Saudi Arabia; On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled Penetration Tester to enhance clients' cybersecurity defenses. In this pivotal role, you will conduct comprehensive vulnerability assessments and ethical hacking, identifying security vulnerabilities across applications, networks, and infrastructure. Your expertise in penetration testing methodologies and tools will be essential in documenting findings and collaborating with client teams to prioritize remediation efforts. This position offers a dynamic environment where your contributions directly impact the security landscape, making it an exciting opportunity for those passionate about cybersecurity.

Qualifications

• 3+ years of experience in penetration testing and ethical hacking.
• Proficient in various penetration testing methodologies and tools.

Responsibilities

• Conduct thorough penetration tests on applications and networks.
• Document findings and provide actionable remediation advice.

Skills

Penetration Testing Methodologies

Network Security Protocols

Web Application Security

Scripting Languages (Python, Bash, PowerShell, Ruby)

Risk Management

Communication Skills

Education

Bachelor's Degree in Cybersecurity

Bachelor's Degree in Computer Science

Master's Degree in Cybersecurity

Tools

Burp Suite

Metasploit

Nessus

Nmap

Wireshark

Job description

Proficient in penetration testing methodologies

Jobseekers from any country

Your role and responsibilities:

As a Penetration Tester at IBM, you will play a critical role in helping clients strengthen their cybersecurity defenses through comprehensive vulnerability assessments and ethical hacking techniques. Your responsibilities will include:

1. Conducting Penetration Tests: Perform thorough and systematic penetration testing on applications, networks, and infrastructure to identify security vulnerabilities.
2. Security Assessments: Identify weaknesses in security policies, procedures, and technologies by simulating real-world attacks.
3. Report Writing: Document findings clearly and concisely, providing actionable remediation advice for security gaps and risks.
4. Collaboration and Consultation: Work alongside internal teams and client security staff to ensure remediation efforts are properly prioritized and executed.
5. Vulnerability Analysis: Analyze test results, identify root causes, and assist clients in creating practical solutions to mitigate risks.
6. Staying Current: Continuously research and stay updated on the latest security trends, attack vectors, tools, and techniques.

Required Education:

Bachelor's Degree

Preferred Education:

Bachelor's Degree

Required Technical and Professional Expertise:

• Technical Knowledge: Proficient in penetration testing methodologies (OWASP, NIST, PTES), network security protocols, and a deep understanding of web application security and network vulnerabilities.
• Tools Expertise: Familiar with penetration testing tools such as Burp Suite, Metasploit, Nessus, Nmap, Wireshark, and others.
• Programming & Scripting Skills: Experience with scripting languages (e.g., Python, Bash, PowerShell, or Ruby) to automate tasks or develop custom exploits.
• Experience in Exploit Development: Ability to identify and exploit vulnerabilities across different platforms and services (e.g., Windows, Linux, macOS, Web Applications, Cloud, etc.).
• Risk Management: Ability to prioritize vulnerabilities based on risk to business operations and present findings to technical and non-technical stakeholders.
• Certifications: Industry-recognized certifications such as OSCP, CEH, or GPEN are highly desirable.
• Communication Skills: Strong written and verbal communication skills to clearly articulate technical issues and findings to diverse audiences, including executives, IT teams, and developers.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent work experience.
• 3+ years of professional experience in penetration testing, ethical hacking, or cybersecurity assessments.
• Hands-on experience with attack techniques, threat modeling, and vulnerability assessment tools.

Preferred Professional and Technical Expertise:

• Master's degree in Cybersecurity or a related field.
• Expertise in securing cloud environments (AWS, Azure, GCP) and containerized applications.
• Familiarity with DevSecOps principles and CI/CD security integration.
• Experience with incident response and forensic investigations.

Note: You will be redirected to the company website to apply for this position.

Disclaimer: Naukrigulf.com is only a platform to connect jobseekers and employers. Applicants should independently verify the legitimacy of prospective employers. We do NOT endorse requests for money payments nor advise sharing personal or bank details. For security advice, visit our website. Report any fraud to [e-mail].