Cybersecurity Assurance Specialist📣 إعلان

منذ ساعة واحدة تقريباً

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	الرياض

وصف الوظيفة

About Cloud Consultancy - CCDS

Cloud Consultancy - CCDS is seeking a Cybersecurity Assurance Specialist to join its team in Riyadh, Saudi Arabia. This is a full-time position focused on strengthening cybersecurity posture through technical assurance activities.

The Role: Cybersecurity Assurance Specialist

The Cybersecurity Assurance Specialist provides essential technical cybersecurity assurance. This involves conducting penetration testing, validating vulnerabilities, verifying remediation efforts, and delivering risk-based reporting. The role requires a minimum of 7 years of experience in related fields.

Key Responsibilities

Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral-movement testing.
Simulate realistic attack scenarios while adhering to approved rules of engagement and protecting service availability and data integrity.
Assess findings based on technical severity, exploitability, and business impact.
Prepare clear technical reports and executive summaries, including practical remediation guidance.
Present findings and recommendations to technical owners and business stakeholders.
Conduct retesting to confirm remediation effectiveness and track the closure of findings.
Monitor vulnerability trends and contribute to the continuous improvement of security-assurance processes.

Qualifications and Experience

Bachelor's degree in Computer Science, Information Security, or a related field.
At least 7 years of experience in penetration testing, cybersecurity assurance, or ethical hacking.
Strong understanding of network, web/application, infrastructure, and cloud attack surfaces.
Hands-on capability in exploitation, privilege escalation, lateral movement, and remediation validation.
Knowledge of OWASP testing methodologies, industry testing standards, vulnerability-rating practices, and MITRE ATT&CK.
Strong technical and executive reporting capability.

Desired Attributes

Ethical, discreet, and disciplined in handling sensitive systems and findings.
Strong analytical curiosity and methodical testing habits.
Ability to explain complex weaknesses and business impact in clear language.
Collaborative and constructive approach when working with system owners on remediation.