Cybersecurity Assurance Specialist

About Cloud Consultancy - CCDS

Cloud Consultancy - CCDS is seeking a Cybersecurity Assurance Specialist to join its team in Riyadh, Saudi Arabia. This is a full-time position focused on strengthening cybersecurity posture through technical assurance activities.

The Role: Cybersecurity Assurance Specialist

The Cybersecurity Assurance Specialist provides essential technical cybersecurity assurance. This involves conducting penetration testing, validating vulnerabilities, verifying remediation efforts, and delivering risk-based reporting. The role requires a minimum of 7 years of experience in related fields.

Key Responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral-movement testing.
• Simulate realistic attack scenarios while adhering to approved rules of engagement and protecting service availability and data integrity.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare clear technical reports and executive summaries, including practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track the closure of findings.
• Monitor vulnerability trends and contribute to the continuous improvement of security-assurance processes.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 7 years of experience in penetration testing, cybersecurity assurance, or ethical hacking.
• Strong understanding of network, web/application, infrastructure, and cloud attack surfaces.
• Hands-on capability in exploitation, privilege escalation, lateral movement, and remediation validation.
• Knowledge of OWASP testing methodologies, industry testing standards, vulnerability-rating practices, and MITRE ATT&CK.
• Strong technical and executive reporting capability.

Desired Attributes

• Ethical, discreet, and disciplined in handling sensitive systems and findings.
• Strong analytical curiosity and methodical testing habits.
• Ability to explain complex weaknesses and business impact in clear language.
• Collaborative and constructive approach when working with system owners on remediation.

Application Information

We invite qualified candidates to apply for this full-time position in Riyadh.