Penetration Tester

We are seeking a highly skilled and motivated Penetration Tester to join our dynamic team in Abu Dhabi. As a Penetration Tester, you will be responsible for assessing the security posture of infrastructure, applications, and cloud environments. Your goal will be to identify vulnerabilities and provide actionable insights to enhance security defenses.

Key Responsibilities:

1. Conduct comprehensive vulnerability assessments and penetration tests across infrastructure, network, web, and mobile applications.
2. Simulate real-world adversary attacks through Red Teaming exercises.
3. Develop and document test cases, exploits, and testing methodologies for internal use and future penetration testing scenarios.
4. Perform post-remediation verification testing to ensure vulnerabilities are resolved and that no new issues have been introduced.
5. Prepare detailed, clear, and actionable reports outlining vulnerabilities, associated risks, and recommended remediation actions.
6. Effectively communicate findings to both technical and non-technical stakeholders, ensuring all parties understand the implications and risks.
7. Provide technical mentorship and training to junior team members on penetration testing techniques, tools, and best practices.
8. Continuously research and stay up-to-date with the latest trends in cybersecurity, emerging vulnerabilities, and evolving attack tactics.
9. Assist clients with threat modeling to proactively identify and mitigate potential attack vectors.
10. Analyze and review code for security vulnerabilities to ensure applications are secure by design.

Required Qualifications:

1. 2-3 years of hands-on experience in penetration testing or security assessments.
2. Proven expertise in conducting penetration tests across multiple domains (infrastructure, network, applications).
3. Strong understanding of cybersecurity frameworks such as MITRE ATT&CK, OWASP, and NIST.
4. Bachelor's degree in a relevant field with certifications such as OSCP, CRTP, eCPPT, CREST, or SANS/GIAC.
5. Proficiency with penetration testing tools like Burp Suite, Metasploit, Nessus, Nmap, Command & Control, etc.
6. Solid experience with scripting languages (Python, PowerShell, Bash) for automation and vulnerability analysis.
7. Strong programming or scripting skills for analyzing and exploiting vulnerabilities.
8. Excellent written and verbal communication skills with the ability to convey complex technical information to a wide audience.
9. A collaborative, team-oriented mindset and a passion for improving security practices.