The Technical Security Assessor will execute in-depth technical security assessments, including vulnerability assessments, penetration testing, source code reviews, and configuration audits to identify and mitigate system and application vulnerabilities. Key responsibilities include:
- Performing manual and automated penetration testing on applications, APIs, infrastructure, and cloud environments.
- Conducting vulnerability assessments and providing remediation guidance based on risk severity.
- Reviewing application source code to detect security flaws and backdoors.
- Executing configuration reviews of critical systems to ensure adherence to security baselines.
- Documenting findings and producing executive and technical-level reports.
- Collaborating with development and operations teams to close identified security gaps.
- Maintaining assessment tools and continuously improving testing methodologies.
- Participating in red/blue team exercises to simulate threat scenarios.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Role Requirements:
Essential Qualifications:
- Bachelor’s degree in Information Security, Computer Science, or Engineering.
- At least 5 years in hands-on security testing roles, ideally in banking or high-risk sectors.
Training:
- CEH, OSCP, or equivalent offensive security certifications.
Specialized Knowledge/Skills:
- Strong grasp of OWASP Top 10, SAST/DAST tools, and secure coding practices.
Preferable Qualifications:
- GPEN, GWAPT, or advanced OSCP/OSCE-type certifications.
- Experience with banking APIs and cloud-native environments.
Specialized Skills:
- Red teaming
- DevSecOps security tooling
- Container security
Behavioral Competencies:
- Curiosity and persistence
- Precision under pressure
- Adaptability to emerging threats
- Team collaboration
Technical Competencies:
- Tools: Burp Suite, Metasploit, Nessus, Wireshark
- Code review: Static/dynamic tools (e.g., SonarQube, Checkmarx)
- Scripting: Python, Bash
- Vulnerability management platforms
Work Conditions: On-site, Full-time
Location: Riyadh, Saudi Arabia
