Vulnerability Assessment and Penetration Testing Senior Engineer

About Masterworks and SOOR

Masterworks, an IT services company, operates SOOR, a subsidiary focused on advanced cybersecurity and secure infrastructure solutions. SOOR assists organizations in managing evolving cyber threats by delivering resilient, scalable, and regulation-aligned security across governance, cloud, networks, and managed defense.

Role Overview

SOOR is seeking a Vulnerability Assessment and Penetration Testing, Senior Engineer to join its security services team. This full-time, client-facing role is based in Riyadh, Riyadh Province, and involves leading complex security assessments across various industries. The Senior Engineer will act as a subject matter expert, identifying critical vulnerabilities, articulating business risks to stakeholders, and guiding remediation efforts.

Key Responsibilities

• Penetration Testing: Lead and execute end-to-end penetration tests on web applications (OWASP Top 10, API security, Business Logic flaws), network infrastructure (Internal/External, Active Directory, Firewalls, Routers), and mobile applications (iOS and Android - static and dynamic analysis).
• Source Code Review: Conduct manual and tool-assisted secure code reviews (SAST) across various languages and frameworks, identify injection flaws, and provide developer-focused remediation guidance.
• Vulnerability Assessment: Perform comprehensive vulnerability assessments and configuration reviews against industry standards such as CIS and NIST.
• Tooling: Utilize and refine advanced tools including Burp Suite Pro, Metasploit, Nmap, Nessus, and Bloodhound. Develop custom scripts or exploits when automated tools are insufficient.
• Optional Skills: Participate in Red Teaming activities, including adversary simulation exercises, social engineering, and physical security assessments. Conduct cloud environment configuration reviews and exploitation for platforms like AWS, Azure, and GCP.

Client Engagement and Consulting

• Scoping: Collaborate with clients to define engagement scope, rules of engagement (RoE), and project timelines.
• Communication: Serve as the primary technical point of contact during engagements, providing status updates and immediate alerts on critical findings.
• Reporting: Author high-quality, executive-level reports that translate technical vulnerabilities into business risks. Explain the impact to C-level executives and provide actionable remediation steps to system administrators.
• Debriefs: Lead technical read-out sessions and remediation workshops with client stakeholders.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in vulnerability assessment and penetration testing.
• Demonstrated expertise in leading complex security assessments across various industries.
• Strong understanding of cybersecurity principles and practices.

Application Process

Candidates interested in this Senior Engineer position are encouraged to apply. Salary details will be discussed during the interview process.