Penetration Tester

About the role

We are looking for a highly skilled and motivated Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. The role involves identifying vulnerabilities, simulating real‑world attacks and supporting clients in strengthening their application security posture.

Key responsibilities

• Perform black‑box, grey‑box and white‑box penetration testing on web and mobile applications, including API testing, authentication bypass and mobile reverse engineering.
• Analyse vulnerabilities, assess business impact and produce detailed reports with executive summaries, technical findings, risk ratings and remediation recommendations.
• Support red‑team exercises, client engagements, remediation discussions and re‑testing of fixes.

Required profile

• Degree in Computer Science, Cybersecurity or equivalent experience with at least 2 years of application security testing.
• Residence in the UAE and willingness to travel within the GCC for on‑site engagements.
• Strong analytical mindset, attention to detail and excellent communication skills in English (Arabic a plus).

Required skills

• Hands‑on experience with tools such as Burp Suite, OWASP ZAP, Metasploit, MobSF, Frida.
• Solid knowledge of OWASP Top 10, web technologies (HTTP/S, APIs, authentication mechanisms) and mobile platforms (iOS, Android).
• Experience with custom script development, secure code reviews and familiarity with cloud environments and API security.

What we offer

• Opportunity to work in a growing cybersecurity environment with a collaborative and dynamic team culture.
• Real impact on security operations and client success across the GCC.
• Chance to be part of a high‑impact cybersecurity team in a dynamic digital region.