VAPT Consultant

Job Title: VAPT Consultant Location: Riyadh, Saudi Arabia Nationality: Only Saudi’s Role Overview We are looking for an experienced L3 VAPT Consultant to lead and execute advanced Vulnerability Assessment and Penetration Testing engagements across applications, infrastructure, networks, APIs, cloud environments, and other enterprise platforms. The role requires strong hands-on technical expertise, the ability to independently handle complex security assessments, provide technical leadership to junior consultants, and engage directly with customers for technical discussions and remediation guidance. Key Responsibilities • Lead end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements. • Perform advanced penetration testing across: • Web applications • Mobile applications • APIs • Network infrastructure • Internal and external environments • Active Directory • Cloud environments • Containers and related infrastructure • Conduct manual testing beyond automated vulnerability scanning and identify complex security weaknesses. • Perform exploitation and validation of vulnerabilities to determine actual business/security impact. • Conduct PT/VA, configuration reviews, security assessments and red-team style testing as required. • Analyze vulnerabilities using industry-standard methodologies such as OWASP, PTES, OSSTMM, NIST and CVSS. • Develop detailed technical findings, including: • Vulnerability description • Business/security impact • Evidence and proof of concept • Risk rating • Root cause • Remediation recommendations • Prepare high-quality technical and executive-level VAPT reports. • Conduct vulnerability retesting and validate remediation implemented by customers. • Provide technical guidance to L1/L2 consultants and review their findings and reports. • Act as the technical escalation point for complex VAPT issues. • Participate in customer discussions, technical workshops, remediation meetings and closure calls. • Support pre-sales activities including technical presentations, scope discussions, effort estimation, RFP/RFQ responses and solution design. • Assist in developing VAPT methodologies, checklists, automation scripts and reusable testing frameworks. • Stay updated on emerging vulnerabilities, exploits, attack techniques and security trends. • Maintain appropriate documentation of testing activities, evidence and customer deliverables. Required Technical Skills • Strong hands-on experience in VAPT and penetration testing. • Excellent knowledge of: • OWASP Top 10 • OWASP API Security • Web application security • Mobile application security • Network security • Active Directory security • API security • Cloud security • Strong understanding of TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, authentication and authorization mechanisms. • Practical experience with tools such as: • Burp Suite • Nmap • Nessus/Qualys • Metasploit • Wireshark • Kali Linux • SQLMap • Nikto • Gobuster/Dirsearch • BloodHound • PowerShell and scripting tools • Ability to perform manual exploitation and vulnerability validation rather than relying solely on automated tools. • Good understanding of CVE/CVSS, exploitability and vulnerability risk assessment. • Strong report-writing and documentation skills. Certifications One or more of the following certifications would be preferred: • OSCP / OSCP+ • CREST certifications • CEH • GPEN • GWAPT • eWPT / eCPPT • CRTP / CRTE • CISSP or equivalent security certification Experience • 5–7 years of cybersecurity experience, with significant hands-on experience in VAPT. • Proven experience independently managing complex VAPT engagements. • Experience working with enterprise customers and conducting customer-facing technical discussions. • Experience mentoring junior/mid-level security consultants. • Experience in consulting, managed security services or cybersecurity service providers is preferred. Behavioral & Professional Skills • Strong analytical and problem-solving skills. • Ability to work independently and manage multiple engagements simultaneously. • Strong customer-facing and communication skills. • Ability to explain complex technical vulnerabilities to both technical and non-technical stakeholders. • Strong ownership of deliverables, timelines and customer commitments. • Willingness to travel to customer locations when required. Show more Show less

5–7 years of cybersecurity experience, with significant hands-on experience in VAPT. Proven experience independently managing complex VAPT engagements. Experience working with enterprise customers and conducting customer-facing technical discussions. Experience mentoring junior/mid-level security consultants. Experience in consulting, managed security services or cybersecurity service providers is preferred.

Lead end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements. Perform advanced penetration testing across web applications, mobile applications, APIs, network infrastructure, internal and external environments, Active Directory, cloud environments, containers and related infrastructure. Conduct manual testing beyond automated vulnerability scanning and identify complex security weaknesses. Perform exploitation and validation of vulnerabilities to determine actual business/security impact. Conduct PT/VA, configuration reviews, security assessments and red-team style testing as required. Analyze vulnerabilities using industry-standard methodologies such as OWASP, PTES, OSSTMM, NIST and CVSS. Develop detailed technical findings, including vulnerability description, business/security impact, evidence and proof of concept, risk rating, root cause, remediation recommendations. Prepare high-quality technical and executive-level VAPT reports. Conduct vulnerability retesting and validate remediation implemented by customers. Provide technical guidance to L1/L2 consultants and review their findings and reports. Act as the technical escalation point for complex VAPT issues. Participate in customer discussions, technical workshops, remediation meetings and closure calls. Support pre-sales activities including technical presentations, scope discussions, effort estimation, RFP/RFQ responses and solution design. Assist in developing VAPT methodologies, checklists, automation scripts and reusable testing frameworks. Stay updated on emerging vulnerabilities, exploits, attack techniques and security trends. Maintain appropriate documentation of testing activities, evidence and customer deliverables.