Senior Penetration Tester

About the Role

A leading security delivery team in Dubai is seeking an experienced Senior Penetration Tester for a full-time role under a one-year renewable contract based on business needs. This position involves spearheading complex security assessments within diverse, modern enterprise settings including cloud platforms, APIs, web and mobile applications, infrastructure, Active Directory environments, and AI/LLM-based systems.

Key Responsibilities

• Manage and execute comprehensive penetration testing projects spanning web applications, APIs, mobile platforms, cloud infrastructure, and AI/LLM technologies.
• Perform sophisticated manual exploitation techniques and threat-focused security evaluations.
• Produce detailed technical reports highlighting vulnerabilities and providing actionable remediation strategies.
• Communicate security issues and risk evaluations effectively to engineering teams, senior leadership, and governmental clients.

Qualifications and Experience

• Minimum of five years’ practical experience in penetration testing.
• Certified with CREST qualifications, preferably CCT INF or CCT APP.
• Proficient in tools such as Burp Suite Professional, Metasploit, BloodHound, Impacket and knowledgeable about securing Active Directory, Kubernetes, CI/CD pipelines, and cloud platforms.
• Experience conducting security reviews in regulated sectors including government, healthcare, or financial services.

Additional Desired Skills

• Certifications like OSCP, OSEP, GPEN, or GXPN are considered advantageous.
• Exposure to AI and large language model security testing is beneficial.
• Familiarity with UAE cybersecurity regulations such as TDRA IAS, DCSS, UAE IA, and ADHICS is a plus.
• Arabic language proficiency is welcomed.

Summary

This is an excellent chance for security professionals eager to contribute to pioneering offensive security initiatives while safeguarding influential organizations across the region.