Penetration Tester

Job Summary:We are looking for a highly skilled and motivated Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. The successful candidate will be responsible for identifying vulnerabilities, simulating real-world attacks, and supporting clients in strengthening their application security posture.This role requires strong technical expertise, hands-on experience in offensive security, and the ability to clearly communicate findings to both technical and non-technical stakeholders.

Key Responsibilities

Web & Mobile Application Security TestingPerform black-box, grey-box, and white-box penetration testing on web and mobile applications Identify, exploit, and document vulnerabilities in accordance with industry standards (e.g., OWASP Top 10, OWASP Mobile Top 10) Conduct secure code reviews when requiredVulnerability Analysis & ReportingAnalyse vulnerabilities and assess their business and technical impact Produce detailed and high-quality penetration testing reports, including: Executive summaries Technical findings Risk ratings and remediation recommendations Present findings to clients and support remediation discussionsOffensive Security ActivitiesPerform advanced testing techniques such as authentication bypass, session management attacks, API testing, and mobile reverse engineering Test REST APIs, microservices, and modern web architectures Support red team exercises when requiredTools & MethodologiesUse industry-standard tools such as Burp Suite, OWASP ZAP, Metasploit, MobSF, Frida, and others Develop custom scripts or tools to support testing activities Follow structured methodologies and frameworks (OWASP, PTES, etc.)Client Engagement & SupportInteract directly with clients to understand application architecture and testing scope Provide clear and actionable remediation guidance Support re-testing and validation of fixesKnowledge Development & ResearchStay up to date with emerging vulnerabilities, attack techniques, and security trends Contribute to internal knowledge sharing, labs, and research initiatives Participate in training, certifications, and cybersecurity eventsRequired Hard Skills:Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience) Minimum 2 years of experience in application security testing (web and/or mobile) Strong knowledge of web technologies (HTTP/S, APIs, authentication mechanisms, etc.) Experience with mobile platforms (iOS, Android) and related security risks Hands-on experience with penetration testing tools (Burp Suite, etc.) Solid understanding of OWASP Top 10 and secure coding practices Strong reporting and communication skills in EnglishRequired Soft Skills:Residence in UAERelevant certifications (e.g., OSCP, OSWE, eWPT, eMAPT, CEH) Experience with mobile app reverse engineering (Frida, Objection, JADX, etc.) Familiarity with cloud environments and API security testing Experience working with clients in the GCC region Strong analytical mindset and attention to detail Excellent interpersonal and teamwork abilitiesFlexibility and composure under stressful situationsWillingness to travel within the GCC for on-site engagements if requiredExcellent communication skills in English (Arabic is a strong advantage)Why Join Us?Opportunity to work in a growing cybersecurity environmentCollaborative and dynamic team cultureReal impact on security operations and client successBe part of a high-impact cybersecurity team in one of the world’s most dynamic digital regions.Apply now and help secure the future of our clients across the GCC, HereWeGo!