Assistant Manager - Penetration Testing

Qiddiya Investment Company is seeking an innovative and skilled Assistant Manager - Penetration Testing to strengthen our security team. In this vital role, you will be responsible for planning, executing, and managing penetration tests to evaluate the security of our systems, applications, and network infrastructures.

Your expertise will play a key role in identifying vulnerabilities and recommending remediation strategies, ultimately contributing to the overall security posture of the organization. You will work closely with various teams to ensure that security is integrated throughout the development and operational processes.

Responsibilities

• Design and conduct penetration testing exercises on IT systems, networks, and applications to identify vulnerabilities and security weaknesses.
• Develop detailed reports of findings, including analysis of risks and recommendations for remediation.
• Collaborate with development and operations teams to provide guidance on security best practices and secure coding techniques.
• Continuously assess and improve penetration testing methodologies and tools to stay ahead of emerging threats.
• Stay current with industry trends, advancements in penetration testing tools, and relevant compliance requirements.
• Conduct security awareness training for technical staff on topics related to penetration testing and vulnerability management.
• Assist in the development of security metrics and reporting related to penetration testing activities.

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• 4-6 years of experience in penetration testing, ethical hacking, or security assessments.
• Proficient in various penetration testing tools and methodologies.
• Strong understanding of networking protocols, application security, and operating system vulnerabilities.
• Excellent analytical and problem-solving abilities.
• Strong communication and interpersonal skills to work collaboratively across teams.
• Relevant certifications (e.g., Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP)) are highly desirable.

Comprehensive benefits package