Senior Penetration Tester📣 Job Ad

About the Role

CyberTimes is seeking a Senior Penetration Tester to join our team in Riyadh. This is a full-time position focused on offensive security operations, requiring a professional who excels in practical exploitation rather than solely report generation.

Core Responsibilities

The Senior Penetration Tester will be responsible for conducting in-depth security assessments across various platforms. This includes identifying vulnerabilities and demonstrating exploitability through hands-on techniques. A key aspect of this role is not only to find weaknesses but also to clearly articulate the methods used and provide actionable remediation guidance.

• Execute exploitation techniques for Web applications, APIs, and Mobile platforms (Android/iOS).
• Perform offensive security testing against network and infrastructure components.
• Conduct endpoint security evasion, including techniques for bypassing Antivirus (AV) and Endpoint Detection and Response (EDR) solutions.
• Explain the mechanisms and rationale behind successful bypass techniques.
• Deliver clear, practical, and actionable remediation recommendations following exploitation.

Required Expertise and Experience

Candidates must possess demonstrated, hands-on experience with real-world scenarios involving EDR and AV bypass. A strong understanding and practical application of attacks against Web, API, Mobile, and Network infrastructure are essential. Experience should extend beyond the use of automated scanners and standard web penetration testing methodologies.

Professional Certifications

While not strictly mandatory, possession of relevant industry certifications is highly valued and indicates a strong foundation in offensive security practices. Preferred certifications include:

• OSEP
• CRTO II
• OSCP
• OSWE
• GPEN

Experience Level

This role requires a minimum of 5 years and up to 10 years of progressive experience in penetration testing and offensive security roles.