Penetration Tester Senior Engineer

About Master Works and SOOR

Master Works, through its subsidiary SOOR, provides advanced cybersecurity and secure infrastructure solutions to help organizations manage evolving cyber threats. SOOR focuses on delivering resilient, scalable, and regulation-aligned security across governance, cloud, networks, and managed defense.

Role Overview: Senior Penetration Tester Engineer

SOOR is seeking a highly skilled Penetration Tester Senior Engineer to join its security services team in Riyadh, Riyadh. This full-time, client-facing role involves leading complex security assessments across various industries. The Senior Engineer will act as a subject matter expert, identifying critical vulnerabilities, articulating business risks to stakeholders, and guiding remediation efforts.

Key Responsibilities

• Lead and execute end-to-end penetration tests on web applications, network infrastructure, and mobile applications (iOS and Android).
• Conduct manual and tool-assisted secure code reviews (SAST) across various languages and frameworks, identifying injection flaws and providing developer-focused remediation guidance.
• Perform comprehensive vulnerability assessments and configuration reviews against industry standards such as CIS and NIST.
• Utilize and refine advanced tooling including Burp Suite Pro, Metasploit, Nmap, Nessus, and Bloodhound, and develop custom scripts or exploits when automated tools are insufficient.
• Collaborate with clients to define engagement scope, rules of engagement (RoE), and timelines.
• Serve as the primary technical point of contact during engagements, providing status updates and immediate alerts on critical findings.
• Author high-quality, executive-level reports that translate technical vulnerabilities into business risks and provide clear remediation instructions for system administrators.
• Lead technical read-out sessions and remediation workshops with client stakeholders.

Optional / Nice-to-Have Skills

• Participation in adversary simulation exercises, social engineering, and physical security assessments (Red Teaming).
• Experience with cloud environment configuration reviews and exploitation (AWS, Azure, GCP).

Experience Required

Candidates should possess 5-10 years of experience in vulnerability assessment and penetration testing.

Application Process

The salary for this position will be disclosed during the interview process.