VAPT Principal Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Provide strategic leadership and technical oversight for vulnerability assessment and penetration testing engagements. Define VAPT methodology and governance, improve QA processes and KPIs, and lead sophisticated testing across web, mobile, cloud, wireless, IoT, and industrial control environments. Supervise red-team and adversary-emulation activities, perform advanced exploitation validation, and translate findings into executive risk insights. Mentor consultants and partner with GRC, SOC, incident response, and cloud security teams to deliver end-to-end cybersecurity outcomes.

Location: Riyadh

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Define, evolve, and champion the VAPT service line roadmap, governance model, and quality assurance processes aligned to OWASP, PTES, OSSTMM, and NIST frameworks.
•Lead and oversee sophisticated penetration-testing engagements across web, mobile, network, cloud, wireless, IoT, and industrial control environments.
•Architect and supervise red-team operations, adversary-emulation exercises, and breach-and-attack simulations to assess organizational resilience.
•Perform and validate advanced exploitation, vulnerability chaining, post-exploitation, and lateral-movement scenarios.
•Serve as a senior executive advisor, mentor senior and junior consultants, and coordinate with GRC, SOC, incident response, and cloud security teams to deliver integrated solutions.

Key Requirements

•Bachelor’s degree in Cybersecurity, Computer Science, or related field.
•7+ years of progressive offensive security and penetration testing experience.
•Proven track record leading large-scale, multi-disciplinary penetration testing and red-team engagements for Fortune 500 or critical-infrastructure clients.
•Deep expertise in attack vectors across web, mobile, cloud, IoT, OT, and wireless environments.
•Strong understanding of PCI-DSS, ISO 27001, NIST, and GDPR, with ability to map findings to business risk.

Experience:7+ yearsOffensive securityPenetration testingRed teamingCritical infrastructureFortune 500

Education:Bachelor's in Cybersecurity, Computer Science

Skills:Strategic leadershipMentorshipCommunicationInfluencingCollaboration

Tech Stack:OWASPPTESOSSTMMNIST 800-115PCI-DSSISO 27001NISTGDPRRed-teamAdversary emulationThreat modelingBreach and attack simulationGRCSOCIncident Response

Company Brief

Cyberani

Website

Loading job details...

Preparing the role view and application actions.

Cyberani

1 week ago

VAPT Principal Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Riyadh

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Define, evolve, and champion the VAPT service line roadmap, governance model, and quality assurance processes aligned to OWASP, PTES, OSSTMM, and NIST frameworks.
•Lead and oversee sophisticated penetration-testing engagements across web, mobile, network, cloud, wireless, IoT, and industrial control environments.
•Architect and supervise red-team operations, adversary-emulation exercises, and breach-and-attack simulations to assess organizational resilience.
•Perform and validate advanced exploitation, vulnerability chaining, post-exploitation, and lateral-movement scenarios.
•Serve as a senior executive advisor, mentor senior and junior consultants, and coordinate with GRC, SOC, incident response, and cloud security teams to deliver integrated solutions.

Key Requirements

•Bachelor’s degree in Cybersecurity, Computer Science, or related field.
•7+ years of progressive offensive security and penetration testing experience.
•Proven track record leading large-scale, multi-disciplinary penetration testing and red-team engagements for Fortune 500 or critical-infrastructure clients.
•Deep expertise in attack vectors across web, mobile, cloud, IoT, OT, and wireless environments.
•Strong understanding of PCI-DSS, ISO 27001, NIST, and GDPR, with ability to map findings to business risk.

Experience:7+ yearsOffensive securityPenetration testingRed teamingCritical infrastructureFortune 500

Education:Bachelor's in Cybersecurity, Computer Science

Skills:Strategic leadershipMentorshipCommunicationInfluencingCollaboration

Tech Stack:OWASPPTESOSSTMMNIST 800-115PCI-DSSISO 27001NISTGDPRRed-teamAdversary emulationThreat modelingBreach and attack simulationGRCSOCIncident Response

Company Brief

Cyberani

Website