Senior VAPT Consultant

Cyberani by aramco digital; Riyadh; On-site; SAR 180,000 - 220,000; Full time

Job summary

A leading cybersecurity firm in Saudi Arabia is seeking an experienced Senior Vulnerability Assessment & Penetration Testing (VAPT) Consultant. This role involves leading complex VAPT engagements and providing expert guidance to clients. You will analyze results, develop methodologies, and mentor junior team members, ensuring high-quality service delivery. The ideal candidate will possess over five years of experience, relevant certifications, and strong communication skills, making a significant impact in the cybersecurity domain.

Qualifications

• 5+ years of experience in vulnerability assessment and penetration testing.
• Strong understanding of offensive security techniques, including web application attacks.
• Advanced communication and presentation skills engaging with stakeholders.

Responsibilities

• Lead and execute high-complexity VAPT engagements.
• Deliver high-quality reports and presentations to stakeholders.
• Mentor junior consultants and promote knowledge sharing.

Skills

Vulnerability assessment

Penetration testing

C2 frameworks

Offensive security techniques

Analyzing complex environments

Client engagement

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Metasploit

Burp Suite

Nmap

Nessus

Job description

Overview

The Senior Vulnerability Assessment & Penetration Testing (VAPT) Consultant is an experienced cybersecurity professional who leads and executes advanced VAPT services, including vulnerability assessments, penetration testing, and red teaming exercises. They serve as trusted advisors, providing expert guidance to clients, mentoring junior team members, and contributing to the strategic growth and development of the VAPT practice.

Responsibilities

• Lead and execute high-complexity VAPT engagements, including vulnerability assessments, penetration testing, red teaming exercises, and adversarial emulation campaigns across diverse environments (e.g., web applications, networks, and cloud infrastructure).
• Develop and customize testing methodologies, tools, and scripts to address unique client requirements, emerging threats, and evasion of detection mechanisms.
• Analyze and interpret assessment results, providing clear, actionable recommendations to mitigate identified risks.
• Deliver high-quality reports, presentations, and executive summaries to technical and non-technical stakeholders.
• Provide guidance on advanced VAPT techniques, tools, and frameworks, offering technical insights and recommendations to clients.
• Collaborate with clients to design and implement remediation strategies, ensuring alignment with their security posture, compliance requirements, and business objectives.
• Stay updated on evolving threats, vulnerabilities, and industry best practices to maintain thought leadership in the VAPT domain.
• Develop and refine methodologies, templates, and tools to improve the delivery of VAPT services.
• Ensure projects are delivered on time, within scope, and aligned with client expectations.
• Mentor junior consultants, providing guidance on technical and professional growth.
• Foster a collaborative and innovative culture within the team, promoting knowledge sharing and cross-functional collaboration.
• Support business development efforts by identifying opportunities to expand VAPT services and contributing to proposals and client presentations.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 5+ years of experience in vulnerability assessment and penetration testing.
• GIAC Advanced Penetration Tester (GXPN)
• Offensive Security Experienced Penetration Tester (OSEP)
• Offensive Security Certified Expert (OSCE)
• Certified Red Team Operator (CRTO)
• Offensive Security Web Expert (OSWE)
• Offensive Security Certified Professional (OSCP)
• Any additional certifications related to the field.
• Strong and deep expertise in vulnerability assessment and penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Nessus, etc.).
• Proficiency in deploying, configuring, and operating C2 frameworks and custom Red Teaming infrastructure (e.g., domain fronting, redirectors, payload hosting).
• Strong understanding of offensive security techniques, including network exploitation, web application attacks, social engineering, and evasion of EDR/XDR solutions.
• Excellent analytical skills, with the ability to assess complex environments and recommend practical solutions.
• Advanced communication and presentation skills, particularly when engaging with senior stakeholders.
• Ability to manage multiple client engagements simultaneously while maintaining high standards.
• Collaborative mindset, with a focus on mentoring and supporting the professional growth of team members.
• Proactive approach to staying updated on emerging threats, vulnerabilities, and industry best practices.