Penetration Tester

About the Role

Socium - Teams Done Differently is seeking a Penetration Tester for an initial 6-month contract, with potential for extension. This onsite role is based in Riyadh, Saudi Arabia, and is open exclusively to Saudi Nationals. The position requires 2-5 years of experience in penetration testing or offensive security.

Key Responsibilities

• Conduct penetration testing and vulnerability assessments across networks, systems, web applications, APIs, and infrastructure.
• Perform manual and automated security testing to identify vulnerabilities and potential attack paths.
• Validate and safely demonstrate identified security weaknesses.
• Conduct reconnaissance, enumeration, exploitation, and post-exploitation activities within authorized testing environments.
• Prepare detailed penetration testing reports, including findings, risk ratings, evidence, and remediation recommendations.
• Collaborate with security, infrastructure, development, and IT teams to communicate vulnerabilities and recommended remediation.
• Perform security testing in accordance with established methodologies and industry best practices.
• Support security assessments, threat modeling, and vulnerability management activities as required.
• Maintain accurate documentation of testing activities, findings, and remediation status.
• Stay current with emerging vulnerabilities, attack techniques, tools, and cybersecurity trends.

Qualifications and Experience

• Saudi Arabian nationality is required.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• At least 2-3 years of experience in penetration testing, ethical hacking, or offensive security.
• Strong knowledge of network, web application, API, and infrastructure security.
• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, or Kali Linux.
• Good understanding of OWASP Top 10 and common web application vulnerabilities.
• Knowledge of TCP/IP, networking, Linux, Windows, Active Directory, and common security technologies.
• Ability to perform vulnerability validation and controlled exploitation.

Required Skills

• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.

Work Arrangement

This is an onsite contract position located in Riyadh, Saudi Arabia. Candidates must be able to work onsite for the duration of the contract.