EJADA تعلن عن وظيفة أخصائي تقييم الثغرات واختبار الاختراق (VAPT) في الرياض

Job Purpose:

The Vulnerability Assessment & Penetration Testing (VAPT) Specialist is responsible for identifying, assessing, and validating cybersecurity vulnerabilities across applications, systems, networks, and infrastructure environments. The role supports the organization's cybersecurity defense strategy through security testing activities, vulnerability management, penetration testing engagements, remediation validation, and continuous improvement of the security posture in alignment with established security frameworks and industry best practices.

Key Accountabilities:

• Conduct vulnerability assessments across network, application, database, cloud, and endpoint environments.
• Perform penetration testing activities against web applications, APIs, systems, and network infrastructure.
• Identify, validate, and reproduce security vulnerabilities and misconfigurations.
• Execute security testing activities aligned with industry-standard methodologies and frameworks.
• Assess applications against OWASP Top 10 and other common security risks.
• Analyze vulnerability scan results and prioritize findings based on risk and business impact.
• Prepare detailed assessment reports, including technical findings, risk ratings, and remediation recommendations.
• Perform remediation validation and retesting activities to confirm vulnerability closure.
• Support vulnerability management activities by tracking findings and coordinating remediation efforts with stakeholders.
• Utilize security testing tools, vulnerability scanners, and penetration testing platforms to conduct assessments.
• Support Red Team exercises and other cybersecurity assessment initiatives as required.
• Maintain testing documentation, evidence, procedures, and assessment records.
• Contribute to continuous improvement initiatives to enhance cybersecurity testing processes and effectiveness.
• Ensure compliance with cybersecurity policies, standards, and regulatory requirements.

Minimum Qualifications:

• Bachelor's Degree in Cybersecurity, Computer Science, Information Security, Information Technology, or a related field.
• Professional certifications such as CEH, eJPT, PNPT, Security+.
• Advanced certifications such as OSCP, GPEN, GWAPT.

Minimum Experience:

• +2 years of experience in Vulnerability Assessment, Penetration Testing, Security Testing, or Cybersecurity Operations.
• Hands-on experience performing vulnerability assessments and penetration testing engagements.
• Experience with security scanning, remediation validation, and vulnerability management processes.
• Experience working with enterprise security tools and cybersecurity best practices.

Job-Specific Skills:

• Vulnerability Assessment and Management.
• Web Application Penetration Testing.
• Network Penetration Testing.
• API Security Testing.
• OWASP Top 10 Security Testing.
• Security Scanning and Vulnerability Validation.
• Burp Suite, Nmap, Metasploit, Nessus, OpenVAS, or equivalent tools.
• Security Testing Methodologies and Frameworks.
• Vulnerability Reporting and Remediation Tracking.
• Security Risk Assessment and Analysis.
• Basic Scripting and Automation (Python, Bash, PowerShell, or similar).
• Security Documentation and Report Writing.
• Red Teaming and Adversary Simulation Awareness.
• Operating Systems Security (Windows, Linux).
• Network Security Fundamentals and Protocol Analysis.