Penetration Tester

About the Role

A1softech is seeking a Penetration Tester to join their team in Riyadh. This full-time position requires 2-5 years of experience and focuses on identifying vulnerabilities, simulating real-world attacks, and strengthening security defenses through advanced testing methodologies.

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, and standards.
• Support cybersecurity strategy, roadmap, and framework development.
• Conduct cybersecurity awareness and training programs.
• Perform cybersecurity risk assessments across systems, applications, and processes.
• Maintain and update the cybersecurity risk register.
• Analyze risks and define appropriate mitigation strategies.
• Track risk treatment plans and monitor progress.

Compliance and Reporting

• Ensure compliance with regulatory standards such as NCA, SDAIA, PDPL, and ISO.
• Prepare and maintain compliance documentation and evidence.
• Coordinate internal and external cybersecurity audits.
• Track compliance gaps and corrective actions.
• Prepare cybersecurity reports and dashboards for management.
• Monitor Key Performance Indicators (KPIs) and cybersecurity performance metrics.

Security Operations and Testing

• Monitor, detect, and respond to threats using advanced SIEM tools and proactive threat hunting, aligning with SOC Analyst and Incident Response functions.
• Identify vulnerabilities, simulate real-world attacks, and strengthen security defenses through advanced penetration testing.

Experience Required

Candidates should possess 2-5 years of experience in a relevant cybersecurity role, with a focus on penetration testing and security assessments.

Work Environment

This is a full-time position based in Riyadh. The salary for this role will be discussed during the interview process.