Cybersecurity Offensive Specialist📣 Job Ad

About Hala

Hala is a leading fintech company in the MENAP region, focused on redefining financial services and building the future bank for SMEs. Established in 2017 and licensed by the Saudi Arabian Central Bank, Hala operates across multiple entities in UAE, Saudi Arabia, and Egypt, providing solutions for digitizing payments and managing sales and operations. We empower SMEs to start, run, and grow their businesses through advanced financial and technological tools.

The Role: Cybersecurity Offensive Specialist

Based in Riyadh, the Cybersecurity Offensive Specialist is responsible for executing Hala's offensive security assessments. This full-time role involves conducting advanced penetration tests to simulate realistic cyberattacks, proactively identifying, and exploiting security vulnerabilities across systems, networks, and applications. A key aspect includes deeply documenting and communicating findings and attack pathways to both technical and executive audiences, providing clear, actionable recommendations. The specialist will also collaborate with defensive security teams to test, validate, and enhance the organization's overall detection and response capabilities against sophisticated, real-world threats.

Key Responsibilities

• Execute Hala's offensive security assessments, including red teaming, adversary simulation, and penetration testing, in alignment with SAMA CSF and NCA ECC requirements.
• Conduct controlled attack exercises on applications, cloud environments, APIs, and payment/merchant platforms to validate real-world exploitability.
• Perform advanced penetration testing and source code reviews to identify deeply rooted vulnerabilities.
• Collaborate with Defense/SOC teams to validate and improve detections against specific attack vectors.
• Maintain and utilize offensive tooling and lab environments, strictly adhering to rules of engagement to ensure safe testing with zero business disruption.
• Deliver clear, detailed remediation guidance to Product/Engineering teams and support the tracking and closure of critical findings.
• Ensure all assessment activities, evidence, and reporting align with SAMA CSF and NCA ECC control objectives and audit expectations.

Qualifications and Experience

• A minimum of 3-5 years of experience in cybersecurity, with a focus on offensive security assessments.

Working at Hala

Hala fosters an inclusive and diverse culture that encourages innovation and flexibility in work setups. We offer autonomy, mentoring, and challenging goals designed to create opportunities for professional growth. Employees are given significant responsibility and trust, reflecting a belief that optimal results are achieved when individuals are empowered to make decisions. Join a team comprising over 30 nationalities working across 7 countries.

Application

Candidates interested in this full-time position in Riyadh are encouraged to apply.