Penetration Tester (Offensive Security Specialist)📣 إعلان

About Naseej and the Opportunity

Naseej is a prominent technology company dedicated to digital transformation in learning and knowledge management. With nearly 36 years of experience and operations across the MENA region, Naseej is a market leader in E-Learning, Edu-Tech, and Digital Transformation. We empower our customers to deliver enhanced user experiences and navigate evolving technology landscapes. We are seeking a Penetration Tester (Offensive Security Specialist) to join our team in Riyadh for a full-time position.

Role Overview

The Penetration Tester is responsible for conducting authorized simulated attacks on networks, applications, and infrastructure. This role focuses on proactively identifying security vulnerabilities to prevent exploitation by malicious actors. It requires substantial hands-on offensive security expertise and the capacity to convert technical findings into clear, actionable remediation advice.

Key Responsibilities

• Plan, scope, and execute penetration tests across various domains including web applications, networks, APIs, mobile applications, and cloud/on-premise infrastructure.
• Perform vulnerability assessments and validate findings to eliminate false positives.
• Conduct manual exploitation beyond automated scanning to accurately assess real-world risk.
• Execute social engineering and phishing simulations when authorized.
• Document findings in comprehensive reports, detailing risk ratings, business impact, and prioritized remediation recommendations.
• Present results and debrief both technical teams and non-technical stakeholders.
• Retest remediated vulnerabilities to confirm effective closure.
• Stay informed about emerging threats, attack techniques, exploits, and security tools.
• Support red team exercises and collaborate with blue team/SOC as required.
• Ensure all testing adheres to agreed scope, rules of engagement, and applicable regulations.

Qualifications and Experience

Candidates should possess 2-5 years of relevant experience in offensive security or penetration testing. Key qualifications include:

• Solid understanding of networking protocols, operating systems (Windows/Linux), and web technologies.
• Strong analytical and problem-solving mindset.
• Demonstrated attention to detail and a methodical approach to testing.
• Ability to work independently and manage testing engagements from initiation to completion.
• Awareness of Saudi regulatory and compliance frameworks (*, NCA controls) is considered an advantage.

Work Environment and Location

This is a full-time position based in Riyadh. The role involves working within a dynamic technology environment, contributing to the security posture of Naseej's diverse digital transformation initiatives.

Application Process

Interested candidates who meet the specified requirements are encouraged to apply.