Penetration Tester

Your new companyYou will be joining a rapidly growing international cybersecurity consulting firm operating at the forefront of offensive security across the Middle East. Headquartered in Dubai's vibrant tech ecosystem, this specialized advisory works directly with enterprise clients across the GCC to strengthen their security posture and simulate advanced cyber threats. They offer a collaborative, dynamic, and high-impact culture where technical initiative, research, and offensive innovation are recognized and rewarded.Your new roleAs a Penetration Tester within the offensive security team, you will be responsible for identifying vulnerabilities, simulating real-world cyber attacks, and conducting deep-dive assessments on web and mobile application ecosystems. Based in Dubai, you will perform hands-on testing and communicate complex technical findings directly to both technical teams and client executives.Key responsibilities include:Web & Mobile Application Security: Performing black-box, grey-box, and white-box penetration testing across web apps, iOS/Android platforms, REST APIs, microservices, and modern web architectures in line with OWASP frameworks.Offensive Operations & Reverse Engineering: Executing advanced testing techniques such as authentication bypass, session hijacking, API exploitation, and mobile reverse engineering using tools like Frida, Objection, and JADX.Reporting & Client Engagement: Assessing business risk, drafting technical reports and executive summaries, and presenting actionable remediation roadmaps directly to enterprise clients across the GCC.Tooling & Research: Utilizing and customizing industry-standard tools (Burp Suite, OWASP ZAP, Metasploit, MobSF) while contributing to internal security research and red-team exercises.What you'll need to succeedLocation & Residence: Must be currently residing in the UAE (with willingness to travel within the GCC for occasional on-site engagements).Experience: Dedicated, hands-on application security testing experience (web and/or mobile).Technical Mastery: Deep understanding of web/mobile technologies, HTTP/S protocols, REST API security, mobile platform risks (iOS/Android), and OWASP Top 10 / OWASP Mobile Top 10 standards.Certifications (Preferred): Active offensive security certifications such as OSCP, OSWE, eWPT, eMAPT, or CEH.Reverse Engineering & Scripting: Familiarity with mobile app reverse engineering tools (Frida, Objection, JADX) and custom script development.Languages & Soft Skills: Fluent English communication and report-writing skills (Arabic is a strong advantage) paired with strong client-facing presentation abilities.What you'll get in returnHigh Technical Autonomy: Direct exposure to diverse, high-impact offensive security engagements across the GCC region.Culture & Environment: A collaborative, continuous-learning culture with dedicated support for cybersecurity research, labs, and professional certifications.Career Growth: Significant opportunity to shape security operations and grow within a fast-expanding international cybersecurity consultancy.

Location: Based in Dubai, UAE—one of the world's most dynamic digital and financial hubs.What you need to do nowIf you are interested in this opportunity, click 'apply now' to submit an up-to-date copy of your CV.