Cybersecurity Offense Specialist

The Cybersecurity Offense Specialist is primarily responsible for executing the organization's offensive security assessments by conducting advanced penetration tests to simulate realistic cyberattacks and proactively identify and exploit security vulnerabilities across systems, networks, and applications. This role requires deep documentation and communication of findings and attack pathways to both technical and executive audiences with clear, actionable recommendations. Additionally, collaboration with defensive security teams is essential to test, validate, and enhance the organization's overall detection and response capabilities against sophisticated, real-world threats.

Key Responsibilities

• Execute the company's offensive security assessments (red teaming, adversary simulation, penetration testing) in alignment with SAMA CSF and NCA ECC requirements.
• Conduct controlled attack exercises on apps, cloud, APIs, and payment/merchant platforms to validate real-world exploitability.
• Execute advanced penetration testing and source code reviews to identify deeply rooted vulnerabilities, and collaborate with Defense/SOC teams to validate and improve detections against these specific attack vectors.
• Maintain and utilize offensive tooling and lab environments; strictly adhere to rules of engagement to ensure safe testing with zero business disruption.
• Deliver clear, detailed remediation guidance to Product/Engineering teams and support the tracking and closure of critical findings.
• Ensure all assessment activities, evidence, and reporting align with SAMA CSF and NCA ECC control objectives and audit expectations.

Minimum Qualifications

• 3-5 years of experience required.
• At least one recognized offensive security certification: OSCP, CRTO, eCPPT or equivalent.
• Preferred (one or more): OSEP, OSWE, GXPN, GWAPT, GPEN, or CRTP/CRTE for advanced red team and adversary-simulation depth.

Location
Riyadh, Riyadh, Saudi Arabia