Senior Penetration Testing Specialist

Senior Penetration Testing Specialist

Dubai, UAE (Onsite) | 1-Year Contract (Renewable)

Are you a hands-on pentester who enjoys finding real attack paths, not just running scanners?

We're looking for a Senior Penetration Testing Specialist to join a high-impact security team in a government-regulated environment.

• Plan and run end-to-end assessments across infrastructure, Active Directory, cloud (Azure/AWS/M365), web, APIs and mobile (iOS/Android)
• Demonstrate realistic attack paths covering privilege escalation, lateral movement and segmentation bypass
• Validate findings manually and eliminate false positives
• Deliver clear executive and technical reports with practical remediation guidance
• Retest fixes and support knowledge-transfer sessions

What you'll bring

• 5+ years in security assessment, including 3+ years in infrastructure and web app pentesting
• At least one of OSCP, CREST CRT/CCT, GPEN or equivalent
• Hands-on with Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket and MobSF
• Strong knowledge of AD/Entra ID, APIs, and CVSS, OWASP and ISO 27001
• DESC Cyber Force member or eligible (mandatory)
• Experience in government or regulated environments
• Strong English reporting skills (Arabic is a plus)

Nice to have

• OSEP, CRTP/CRTE, CREST CCT INF, GCPN, eMAPT/GMOB, cloud security certifications.