Penetration Tester

About ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms, and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia. Position Summary ExeQut is hiring a Penetration Tester to identify, exploit, and report on security vulnerabilities across web, API, mobile, network, infrastructure, cloud, and Active Directory environments helping our clients understand and reduce their real-world security risk. What You Will Do Conduct Web, API, Mobile, Network, Infrastructure, Cloud, and Active Directory penetration testing Identify and safely exploit vulnerabilities and assess business impact Perform vulnerability validation, privilege escalation, and security assessments Use tools such as Burp Suite, Nmap, Metasploit, Nessus, Kali Linux, and BloodHound Prepare technical reports with findings, risk ratings, evidence, and remediation recommendations Perform remediation retesting and communicate findings to technical teams Required Qualifications 3 6+ years of hands-on penetration testing experience Strong knowledge of OWASP Top 10, networking, Windows/Linux, Active Directory, APIs, and cloud security Scripting knowledge (Python/PowerShell/Bash) Saudi Nationality required Preferred Qualifications OSCP, OSWE, OSEP, CREST, GPEN, or CEH certification Experience in banking, telecom, government, or with Saudi NCA/SAMA frameworks What We Offer Performance-based compensation structure Bupa medical insurance (Golden Tier) Ongoing training and mentorship from experienced leadership Exposure to high-impact projects with leading clients in Saudi Arabia A collaborative, growth-oriented culture If you're a hands-on penetration tester who thrives on uncovering and helping fix real security risks, we'd love to have you on board let's build something great together! Desired Candidate Profile 3 6+ years of hands-on penetration testing experience Strong knowledge of OWASP Top 10, networking, Windows/Linux, Active Directory, APIs, and cloud security Scripting knowledge (Python/PowerShell/Bash) Saudi Nationality required OSCP, OSWE, OSEP, CREST, GPEN, or CEH certification Experience in banking, telecom, government, or with Saudi NCA/SAMA frameworks