Security Consultant - Penetration Testing

About the role

A client of the recruiter is looking for an experienced Security Consultant - Penetration Testing to carry out advanced security assessments and penetration tests across web applications, APIs, mobile applications, internal and external networks, Active Directory and cloud environments. The position is full-time and onsite in Dubai, UAE, and the candidate must be currently based in the UAE.

Key responsibilities

• Conduct penetration testing on web, API, mobile and cloud applications, and on internal and external networks
• Perform Active Directory attacks and privilege escalation tests
• Validate vulnerabilities, document findings and prepare technical reports
• Provide actionable remediation recommendations
• Present findings to clients, lead complex assessments and mentor junior penetration testers
• Support technical scoping, effort estimation and pre-sales activities

Required profile

• At least 4 years of hands-on penetration testing experience, preferably 4-6 years
• Currently based in the UAE; the stated 1 certification is mandatory
• Strong English communication skills

Required skills

• One of the following certifications: OSEP or OSWE
• Web application and API penetration testing, advanced exploitation and business logic vulnerabilities
• Source-code security analysis, network penetration testing and Active Directory attacks
• Mobile application and cloud penetration testing exposure