Cybersecurity Assurance Specialist

Location

• The role is on-site in Riyadh, Saudi Arabia.

Contract and Engagement

• The engagement is project-based managed cybersecurity services for 13 months.

Experience

• A minimum of 7 years of experience is required in penetration testing, cybersecurity assurance, or ethical hacking.

Role Purpose

Key Responsibilities

• Plan and execute authorized penetration tests across in-scope networks, applications, systems, and cloud environments.
• Perform reconnaissance, attack-surface analysis, vulnerability discovery, safe exploitation, privilege escalation, and lateral-movement testing.
• Simulate realistic attack scenarios under approved rules of engagement while protecting service availability and data.
• Assess findings based on technical severity, exploitability, and business impact.
• Prepare technical reports and executive summaries with practical remediation guidance.
• Present findings and recommendations to technical owners and business stakeholders.
• Conduct retesting to confirm remediation effectiveness and track closure of findings.
• Monitor vulnerability trends and improve security-assurance processes.

Technical and Professional Requirements

• A bachelor’s degree in Computer Science, Information Security, or a related field is required.
• Strong understanding of network, web/application, infrastructure, and cloud attack surfaces is required.
• Hands-on capability in exploitation, privilege escalation, lateral movement, and remediation validation is required.
• Knowledge of OWASP methodologies, industry testing standards, vulnerability-rating practices, and MITRE ATT&CK is required.
• Strong technical and executive reporting capability is required.

Personal Requirements

• Candidates should be ethical, discreet, and disciplined when handling sensitive systems and findings.
• Candidates should demonstrate analytical curiosity and methodical testing habits.
• Candidates must explain complex weaknesses and business impact in clear language.
• Candidates should work collaboratively and constructively with system owners on remediation.

Preferred Certifications

• OSCP, OSEP, CEH, or an equivalent professional certification is preferred.