Penetration Tester

Role: Penetration Tester Contract: Outsoutce with AIQU ,Yearly extendable location :Onsite In Riyadh - Identify, validate, and document security vulnerabilities. - Assess security weaknesses through controlled exploitation techniques. - Prepare detailed penetration testing reports, including risk ratings, technical evidence, business impact, and remediation recommendations. - Conduct retesting after remediation to validate the effectiveness of corrective actions. - Support vulnerability assessment and security testing activities. - Provide recommendations to strengthen security controls and reduce exposure to cyber threats. - Link identified vulnerabilities and penetration testing findings with the organization’s Cybersecurity Risk Register. - Assess the risk impact of identified vulnerabilities and support the classification of findings based on likelihood, impact, and overall risk level. - Coordinate with relevant teams to follow up on risk treatment plans, remediation actions, and closure status. - Support risk owners in understanding technical findings, associated risks, and required mitigation actions. -Track open findings and ensure proper documentation of remediation, risk acceptance, or compensating controls. - Provide technical input to support cybersecurity risk management activities and improve the organization’s overall security posture.

Identify, validate, and document security vulnerabilities. Assess security weaknesses through controlled exploitation techniques. Prepare detailed penetration testing reports, including risk ratings, technical evidence, business impact, and remediation recommendations. Conduct retesting after remediation to validate the effectiveness of corrective actions. Support vulnerability assessment and security testing activities. Provide recommendations to strengthen security controls and reduce exposure to cyber threats. Link identified vulnerabilities and penetration testing findings with the organization’s Cybersecurity Risk Register. Assess the risk impact of identified vulnerabilities and support the classification of findings based on likelihood, impact, and overall risk level. Coordinate with relevant teams to follow up on risk treatment plans, remediation actions, and closure status. Support risk owners in understanding technical findings, associated risks, and required mitigation actions. Track open findings and ensure proper documentation of remediation, risk acceptance, or compensating controls. Provide technical input to support cybersecurity risk management activities and improve the organization’s overall security posture.