Penetration Testing Specialist

‏⁦ Cipher | سايڤر is a cybersecurity solutions provider based in Riyadh, Saudi Arabia. The company's goal is to simplify the perception of complexity surrounding cybersecurity problems and solutions. Cipher's team of Saudi professionals and experts work tirelessly to develop, customize, and manage digital services and cybersecurity solutions to ensure their peace of mind. Our goal is to provide peace of mind to our clients by making digital security simple and efficient. ⁩ ⁦⁩Key Responsibilities: ⁦ • Define scope and objectives of penetration tests with clients across systems, applications, and environments. • Perform manual penetration testing on web, mobile, APIs, cloud, and enterprise infrastructure. • Conduct advanced assessments including source code reviews, business logic testing, and red team simulations. • Simulate real-world attacks to evaluate detection and response capabilities. • Identify vulnerabilities, misconfigurations, and security gaps (onsite & remote). • Deliver clear, actionable technical reports with risk and business impact analysis. • Present findings to both technical teams and executive stakeholders. • Provide strategic recommendations to enhance security posture and reduce attack surface. • Stay up to date with emerging threats and frameworks (OWASP, MITRE ATT&CK). ⁦⁩Requirements: ⁦• Minimum 2+ years of hands-on experience** in penetration testing and cybersecurity. • Bachelor’s degree in computer science, Cybersecurity, IT, or related field. • Certifications such as **OSCP, eWPTX, CRTP** (or equivalent) are highly preferred. • Strong experience across web, mobile, cloud, and infrastructure security testing. • Solid skills in manual vulnerability discovery, code review, and adversary simulation. • Proficiency in scripting (Python, PowerShell, Bash). • Strong analytical, problem-solving, and communication skills. • Ability to translate technical findings into business risks and recommendations. Show more Show less

Minimum 2+ years of hands-on experience in penetration testing and cybersecurity. Bachelor’s degree in computer science, Cybersecurity, IT, or related field. Certifications such as OSCP, eWPTX, CRTP (or equivalent) are highly preferred. Strong experience across web, mobile, cloud, and infrastructure security testing. Solid skills in manual vulnerability discovery, code review, and adversary simulation. Proficiency in scripting (Python, PowerShell, Bash). Strong analytical, problem-solving, and communication skills. Ability to translate technical findings into business risks and recommendations.

Define scope and objectives of penetration tests with clients across systems, applications, and environments. Perform manual penetration testing on web, mobile, APIs, cloud, and enterprise infrastructure. Conduct advanced assessments including source code reviews, business logic testing, and red team simulations. Simulate real-world attacks to evaluate detection and response capabilities. Identify vulnerabilities, misconfigurations, and security gaps (onsite & remote). Deliver clear, actionable technical reports with risk and business impact analysis. Present findings to both technical teams and executive stakeholders. Provide strategic recommendations to enhance security posture and reduce attack surface. Stay up to date with emerging threats and frameworks (OWASP, MITRE ATT&CK).