VAPT Specialist📣 إعلان

About the VAPT Specialist Role

Tamkeen Technologies is seeking an experienced VAPT Specialist to join our team in Riyadh, Saudi Arabia. This full-time role requires 2-5 years of experience, with a primary focus on Network Penetration Testing, complemented by expertise in web and mobile application security.

Role Overview

The VAPT Specialist will be responsible for identifying, validating, and exploiting security vulnerabilities across various enterprise environments. This includes providing actionable remediation recommendations that align with industry-standard security frameworks and methodologies to enhance the organization's overall security posture.

Key Responsibilities

• Perform internal and external network penetration testing as a primary responsibility.
• Conduct web application, API, and mobile application penetration testing.
• Execute vulnerability assessments using tools such as ******* / Nessus.
• Lead red teaming and adversary simulation activities to assess the organization's ability to detect, respond to, and mitigate realistic attacks.
• Perform manual vulnerability validation and exploitation beyond automated scanning.
• Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation activities.
• Assess network infrastructure, Active Directory, Windows/Linux systems, network services, and security controls.
• Identify vulnerabilities and evaluate their business and technical impact.
• Prepare detailed technical reports and executive-level summaries.
• Provide clear and actionable remediation recommendations.
• Perform vulnerability retesting and validate remediation efforts.
• Develop and maintain VAPT methodologies, testing checklists, and technical procedures.
• Adhere to recognized security frameworks and methodologies, including NIST, OWASP, and industry-standard penetration testing practices.
• Research emerging vulnerabilities, exploits, attack techniques, and offensive security methodologies.

Required Qualifications and Experience

• Strong and proven experience in Network Penetration Testing.
• Practical experience in:
  • Internal & External Network Penetration Testing
  • Active Directory Security Testing
  • Web Application & API Penetration Testing
  • Mobile Application Penetration Testing
  • Vulnerability Assessment
  • Red Teaming / Adversary Simulation
• Experience with ******* / Nessus is preferred.
• Strong understanding of NIST, OWASP, and penetration testing methodologies.
• Strong knowledge of network protocols, Windows/Linux systems, Active Directory, authentication mechanisms, and common network security controls.
• Strong understanding of vulnerability exploitation and post-exploitation techniques.
• Strong technical report writing and documentation skills.

Education Requirements

• A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is preferred.
• Equivalent professional experience and relevant industry certifications may be considered.

Work Environment

This full-time position is based in Riyadh, Saudi Arabia, offering an opportunity to contribute to advanced cybersecurity initiatives within a professional and dynamic environment.