Senior Penetration Tester – Cloud, API & AD Security

ExeQut AI Consulting; Riyadh; Presencial; SAR 180.000 - 300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Bupa medical insurance

Golden Tier

Performance-based compensation

Ongoing training and mentorship

Exposure to high-impact projects

Collaborative growth-oriented culture

Descripción de la vacante

ExeQut AI Consulting in Riyadh seeks a hands-on Penetration Tester to identify vulnerabilities across web, API, mobile, network, cloud, and Active Directory environments. You will report findings, risk ratings, evidence, and remediation steps to clients and technical teams.

The role demands 3–6 years of experience, strong security knowledge, scripting ability, and Saudi nationality. OSCP/OSWE/OSEP/CREST/GPEN/CEH certifications are preferred, with exposure to sectors like banking or telecom.

Formación

• 3–6 years of hands-on penetration testing experience.
• Strong knowledge of OWASP Top 10, networking, Windows, Linux, Active Directory, APIs and cloud security.
• Scripting knowledge in Python, PowerShell, or Bash.
• Saudi nationality is required.

Responsabilidades

• Conduct Web/API/Mobile/Network infrastructure, Cloud, and Active Directory penetration testing.
• Identify and safely exploit vulnerabilities and assess business impact.
• Perform vulnerability validation, privilege escalation, and security assessments.
• Use tools such as Burp Suite, Nmap, Metasploit, Nessus, Kali Linux, BloodHound.
• Prepare technical reports with findings, risk ratings, evidence, and remediation recommendations.
• Perform remediation retesting and communicate findings to technical teams.

Conocimientos

Penetration testing

Networking

Windows / Linux

Active Directory

APIs

Cloud security

Scripting

Educación

OSCP

OSWE

OSEP

CREST

GPEN

CEH

Herramientas

Burp Suite

Nmap

Metasploit

Nessus

Kali Linux

BloodHound

Descripción del empleo

ExeQut AI Consulting in Riyadh seeks a hands-on Penetration Tester to identify vulnerabilities across web, API, mobile, network, cloud, and Active Directory environments. You will report findings, risk ratings, evidence, and remediation steps to clients and technical teams.

The role demands 3–6 years of experience, strong security knowledge, scripting ability, and Saudi nationality. OSCP/OSWE/OSEP/CREST/GPEN/CEH certifications are preferred, with exposure to sectors like banking or telecom.