Senior Associate – Vulnerability & Penetration Testing

About the role

Al Etihad Payments is looking for a senior professional to lead its vulnerability management, penetration testing and security assessment activities. The role will oversee the identification, assessment and remediation of security weaknesses across applications, infrastructure, networks, cloud environments and other technology assets.

Key responsibilities

• Design, implement and maintain the annual penetration-testing program, coordinating both internal and external tests for web applications, APIs, mobile apps, network infrastructure and cloud assets.
• Review penetration-testing reports, validate findings and ensure vulnerabilities are assigned to the appropriate risk owners for timely remediation.
• Establish and run a comprehensive vulnerability-management program, including regular scanning of servers, endpoints, databases and network devices, and prioritising remediation based on severity and business impact.
• Collaborate with application development and DevSecOps teams to embed security testing (SAST, DAST, API testing) into the software development lifecycle.
• Coordinate risk and exception management with asset owners and the GRC team, documenting residual risks and escalating critical issues.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or a related field.
• Minimum 8 years of cybersecurity experience with a strong focus on VAPT and vulnerability management.
• Proven experience managing external penetration-testing engagements.
• Deep understanding of network, application, API and infrastructure security.

Required skills

• OSCP, OSCP+CREST, GPEN, GWAPT, CEH certifications.
• Proficiency with Burp Suite Professional, Nmap, Metasploit, Wireshark, sqlmap.
• Scripting in Python, PowerShell or Bash for automation.
• Hands‑on experience with Kali Linux and OWASP Top 10 vulnerabilities.
• Knowledge of SAST, DAST and API security testing tools.

What we offer

• Modern, flexible work environment.
• Dynamic team contributing to UAE national digital objectives.
• Competitive compensation with annual bonus.
• Benefits such as child education allowance, annual flight tickets and comprehensive health insurance.