وظيفة مهندس اختبار اختراق لدى SIGMA بجدة

Job Title: Penetration Testing & Secure Code Review Specialist (Saudi National)
Location: Jeddah, Saudi Arabia
Employment Type: Full-Time
Client: Semi-Government Entity

Job Summary
We are seeking a highly skilled Penetration Testing & Secure Code Review Specialist to join a leading Semi-Government Entity in Jeddah. The successful candidate will be responsible for identifying security vulnerabilities through penetration testing, performing secure code reviews, and providing actionable recommendations to improve the organization's overall security posture. This role requires strong technical expertise in offensive security, secure software development practices, and application security.

Key Responsibilities
Conduct Web, Mobile, API, Network, and Infrastructure Penetration Testing.
Perform Secure Source Code Reviews (Manual and Automated) for applications developed in Java, .NET, Python, PHP, JavaScript, and other technologies.
Identify, validate, and prioritize security vulnerabilities based on business risk.
Prepare detailed technical reports and executive summaries with remediation recommendations.
Perform vulnerability assessments using industry-standard security tools.
Collaborate with development teams to remediate identified security issues.
Validate remediation through security re-testing.
Conduct threat modeling and security architecture reviews.
Ensure applications comply with secure coding standards and security best practices.
Support Secure SDLC (SSDLC) initiatives and DevSecOps implementation.
Develop proof-of-concepts for identified vulnerabilities when required.
Keep up to date with emerging cyber threats, attack techniques, and security trends.
Participate in Red Team and Purple Team exercises when needed.
Support compliance with cybersecurity frameworks and regulatory requirements.

Required Qualifications
Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
Saudi National (Mandatory).
4+ years of hands-on experience in Penetration Testing and Secure Code Review.
Strong knowledge of:
OWASP Top 10
OWASP ASVS
CWE
CVSS
MITRE ATT&CK Framework
Secure SDLC
Experience testing:
Web Applications
Mobile Applications (Android & iOS)
APIs
Internal & External Networks
Cloud Environments
Experience reviewing source code in one or more programming languages such as Java, C#, .NET, Python, PHP, JavaScript, or Go.
Hands-on experience with security tools including:
Burp Suite Professional
OWASP ZAP
Nmap
Nessus
Metasploit
Wireshark
SAST, DAST, and SCA tools
Strong understanding of authentication, authorization, cryptography, and secure coding principles.
Excellent analytical, documentation, and communication skills.