وظيفة مهندس Penetration Testing & Red Team Engineer شاغرة لدى VaporVM بالرياض

We are looking for a Penetration Testing & Red Team Engineer with strong hands-on experience in VAPT, web and mobile application security, infrastructure penetration testing, API security, Active Directory, and red teaming.

Key Responsibilities

• Conduct Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, network, cloud, and infrastructure environments.
• Perform Black Box, Grey Box, and White Box security assessments.
• Conduct Red Team activities, including domain enumeration, privilege escalation, credential dumping, lateral movement, reverse shells, and security-control bypass testing.
• Perform Web and Mobile Application Security Testing for Android and iOS applications.
• Conduct API security testing for REST and SOAP services.
• Perform Active Directory and Infrastructure Penetration Testing.
• Conduct SAST/DAST and Source Code Reviews using tools such as Fortify, SonarQube, and related technologies.
• Perform security configuration and compliance reviews against CIS Benchmarks.
• Identify, validate, and prioritize vulnerabilities while eliminating false positives.
• Prepare detailed security assessment reports, remediation recommendations, and client deliverables.
• Work with development, infrastructure, and security teams to support vulnerability remediation and secure practices.

Required Skills

• Strong knowledge of OWASP Top 10, SANS Top 25, VAPT, and penetration testing methodologies.
• Hands-on experience with Burp Suite, ZAP, Nessus, Nmap, Metasploit, Acunetix, OpenVAS, SQLMap, Wireshark, and related tools.
• Experience with Frida, Objection, MobSF, Drozer, Jadx for mobile security testing.
• Knowledge of AWS and Azure security.
• Strong reporting, documentation, communication, and client-facing skills.

Certifications

Relevant certifications such as OSCP, CRTP, eWPT, eJPT, CAP, or CEH are preferred. OSCP is currently in progress.