Consultant - Cybersecurity, Penetration Testing

Consultant - Cybersecurity, Penetration Testing Job Details | Elm By continuing to use and navigate this website, you are agreeing to the use of cookies. Accept Close Skip to main content Home Life at Elm About Elm Elm Culture Working at Elm Elm Benefits Recruitment Processes Jobs Experienced Professional Fresh Graduates Coop Tainee and Training Programs Part Time and Freelancer Tajseer Program Elm Events Contact Us Search by Keyword Search by Location Clear Home Life at Elm About Elm Elm Culture Working at Elm Elm Benefits Recruitment Processes Jobs Experienced Professional Fresh Graduates Coop Tainee and Training Programs Part Time and Freelancer Tajseer Program Elm Events Contact Us Language العَرَبِيَّة (السعودية) English (United Kingdom) English (United States) View profile Search by Keyword Search by Location Clear Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Apply now » Apply now Apply Now Start applying with LinkedIn Start Please wait... Consultant - Cybersecurity, Penetration Testing Date: 22 Oct 2026 Custom Field 1: 733155 Location: Riyadh, SA Facility: Technology & Engineering Job Description OVERVIEW Job Title Consultant Job Code 733155 Grade I3 Group Legal, Risk & Governance Division Technology Department Cybersecurity Unit PT&VA ROLE PURPOSE The aim is to state the overall significance of the job from the organization’s perspective. The role exists to support the identification and assessment of cybersecurity weaknesses through the planning and execution of authorized penetration testing engagements across applications, infrastructure, and other agreed technology environments. The role provides technical analysis and practical remediation recommendations, validates corrective actions, and contributes to the continuous improvement of penetration testing practices to strengthen the organization’s cybersecurity posture. KEY ACCOUNTABILITIES & ACTIVITIES This section describes the principal outputs required from the job. Key Accountabilities Key Activities Engagement Scoping & Planning Define testing objectives, scope, prerequisites, and deliverables with asset owners and relevant cybersecurity stakeholders. Prepare engagement plans and rules of engagement covering authorization, permitted techniques, testing windows, and escalation arrangements. Assess testing risks and coordinate access and operational safeguards before commencing approved activities. Application & API Penetration Testing Perform authorized penetration testing of web applications, mobile applications, and APIs within the agreed scope. Assess authentication, authorization, session management, input handling, and business logic controls using manual and automated techniques. Validate identified weaknesses and document reproducible evidence and potential business impacts. Infrastructure & Platform Penetration Testing Assess in-scope internal and external networks, systems, and cloud environments for exploitable weaknesses and configuration gaps. Evaluate attack paths, privilege boundaries, and exposure of sensitive services through controlled testing within approved limits. Coordinate with technical owners to manage testing dependencies and promptly escalate unexpected operational impacts. Vulnerability Validation & Risk Analysis Analyze testing results, remove false positives, and assess the exploitability and impact of confirmed findings. Prioritize findings using the approved risk assessment approach, considering asset criticality, exposure, and compensating controls. Identify related weaknesses and attack chains to explain potential impacts on critical services and information assets. Technical Reporting & Remediation Advisory Produce penetration testing reports covering scope, approach, findings, supporting evidence, risk ratings, and remediation recommendations. Communicate technical findings and business implications to asset owners and relevant stakeholders. Advise technical teams on practical corrective measures and clarify findings throughout remediation. Remediation Validation & Closure Conduct retesting to verify corrective actions and assess whether identified weaknesses have been adequately addressed. Maintain accurate finding status and supporting evidence, and escalate overdue or unresolved issues through established channels. Document residual weaknesses and provide technical input to formal closure or risk acceptance decisions by authorized owners. Testing Methods, Tools & Quality Maintain and improve testing procedures, checklists, and reusable scripts in line with approved methodologies. Evaluate testing tools and techniques in controlled environments and recommend improvements to coverage and efficiency. Review technical evidence and reports, share specialist knowledge, and provide guidance to colleagues to support consistent testing quality. Stakeholder Coordination & Technical Research Coordinate engagement schedules, dependencies, and delivera

Engagement Scoping & Planning; Application & API Penetration Testing; Infrastructure & Platform Penetration Testing; Vulnerability Validation & Risk Analysis; Technical Reporting & Remediation Advisory; Remediation Validation & Closure; Testing Methods, Tools & Quality; Stakeholder Coordination & Technical Research