Senior Penetration Tester

Job Title:

Senior Information Security Specialist – Penetration Tester

Job Description:

NOZOM is seeking a Senior Information Security Specialist with extensive hands‑on experience in penetration testing and Red Team operations. The successful candidate will lead advanced security assessments and attack simulations across networks, applications, endpoints, wireless environments, and cloud platforms.

• Lead internal and external network penetration testing engagements.
• Conduct advanced Red Team and adversary simulation exercises based on defined tactics, techniques, and procedures (TTPs).
• Identify, exploit, validate, and document complex security vulnerabilities.
• Assess endpoints, infrastructure, wireless networks, and internet‑connected devices.
• Perform secure code reviews and identify authentication flaws, hardcoded credentials, and insecure logic.
• Assess cloud platforms, including AWS, Azure, GCP, and Oracle.
• Evaluate Active Directory attack paths, cloud attack vectors, and privilege escalation risks.
• Prepare executive and technical reports with clear remediation recommendations.
• Present findings to clients and stakeholders.
• Support remediation validation and mentor junior consultants.

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 6 years of relevant experience in penetration testing and offensive security.
• Fluency in Arabic is required.
• Advanced experience in network, web application, endpoint, wireless, and cloud penetration testing.
• Strong knowledge of Active Directory attacks, OWASP Top 10, Command and Control (C2) infrastructure, and advanced exploitation techniques.
• Strong leadership, analytical, technical reporting, and client‑facing presentation skills.
• One or more of the following certifications is preferred: OSEP, GPEN, GWAPT, GXPN, CRTO, or eWPTX.