# Penetration Tester

> Managed Services · Riyadh, Saudi Arabia · Full-time · Posted 2026-08-04

**Workplace:** on_site

## Description

Managed.sa is seeking a hands-on Penetration Tester to conduct security assessments, identify and validate vulnerabilities, and provide practical remediation recommendations across client environments.

The ideal candidate has strong offensive-security skills, practical testing experience, and the ability to prepare clear and professional technical reports.

### Key Responsibilities

-   Conduct penetration testing across web applications, APIs, networks, infrastructure, and cloud environments.
-   Perform manual and automated vulnerability assessments.
-   Safely exploit identified vulnerabilities to assess their technical and business impact.
-   Test authentication, authorization, session management, and application logic.
-   Participate in red-team and adversary-simulation activities when required.
-   Conduct source-code security reviews and identify insecure coding practices.
-   Document findings with supporting evidence, risk ratings, and remediation recommendations.
-   Present and explain technical findings to clients and internal stakeholders.
-   Conduct retesting to verify that vulnerabilities have been properly remediated.
-   Stay updated on emerging vulnerabilities, exploitation techniques, and offensive-security tools.

## Requirements

-   Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field.
-   2–3 years of practical experience in penetration testing or offensive security.
-   Hands-on experience in web application and network penetration testing.
-   Strong knowledge of vulnerability assessment and exploitation techniques.
-   Good understanding of network protocols, including TCP/IP, DNS, and HTTP.
-   Strong working knowledge of Linux and Windows environments.
-   Strong understanding of web technologies, APIs, authentication mechanisms, and the OWASP Top 10.
-   Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Nessus.
-   Scripting skills in Python, Bash, PowerShell, Ruby, or a similar language.
-   Strong technical-reporting and communication skills.
-   Ability to work full-time on-site in Riyadh.

### Preferred Experience

-   Cloud security assessments.
-   Red-team operations.
-   Source-code security reviews.
-   Client-facing penetration-testing engagements.

### Preferred Certifications

One or more of the following certifications would be an advantage:

-   Offensive Security Certified Professional (OSCP)
-   Certified Ethical Hacker (CEH)
-   GIAC Penetration Tester (GPEN)
-   Offensive Security Experienced Penetration Tester (OSEP)
-   Certified Red Team Professional (CRTP)
-   Certified Red Team Operator (CRTO)

## Apply

[Apply at Managed Services](https://apply.workable.com/managed-services/j/47F95BC46C/apply)

---
Powered by [Workable](https://www.workable.com)