Consultant Cybersecurity Penetration Testing

About the Role

Elm Company is seeking a Consultant Cybersecurity Penetration Testing to join their team in Riyadh, Saudi Arabia. This full-time role focuses on identifying and assessing cybersecurity weaknesses through planned and executed penetration testing engagements across various technology environments, including applications and infrastructure. The consultant will provide technical analysis, practical remediation recommendations, and validate corrective actions to enhance the organization's cybersecurity posture.

Key Responsibilities

• Define testing objectives, scope, prerequisites, and deliverables with asset owners and cybersecurity stakeholders.
• Prepare engagement plans and rules of engagement, covering authorization, permitted techniques, testing windows, and escalation procedures.
• Perform authorized penetration testing of web applications, mobile applications, and APIs, assessing authentication, authorization, session management, input handling, and business logic controls.
• Assess in-scope internal and external networks, systems, and cloud environments for exploitable weaknesses and configuration gaps.
• Analyze testing results, remove false positives, and assess the exploitability and impact of confirmed findings, prioritizing them based on risk.
• Produce comprehensive penetration testing reports detailing scope, approach, findings, evidence, risk ratings, and remediation recommendations.
• Communicate technical findings and business implications to relevant stakeholders and advise technical teams on corrective measures.
• Conduct retesting to verify corrective actions and assess the adequacy of addressed weaknesses.
• Maintain and improve testing procedures, checklists, and reusable scripts in line with approved methodologies.
• Research emerging vulnerabilities and attack techniques relevant to the organization’s technology landscape.

Required Experience and Qualifications

• A minimum of 5 to 10 years of experience in cybersecurity penetration testing.
• Demonstrated ability to plan and execute authorized penetration testing engagements across diverse technology environments.
• Proficiency in assessing applications, APIs, infrastructure, and cloud environments for security weaknesses.
• Experience in analyzing testing results, prioritizing findings, and providing practical remediation advice.
• Strong understanding of risk assessment methodologies and vulnerability validation processes.

Compliance and Quality Standards

• Adherence to all relevant departmental policies, processes, standard operating procedures, and instructions.
• Compliance with safety, quality, and environmental management policies and controls.
• Strict adherence to information security practices and standards to ensure data integrity and confidentiality.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves coordination with various internal stakeholders, technology teams, and external testing providers.

Application Process

Candidates interested in this Consultant Cybersecurity Penetration Testing role at Elm Company are encouraged to apply. Salary details will be disclosed during the interview process.