We use technical cookies and visit statistics: Yandex Metrica and Zorky's own de-identified visit log (cookie zk_aid). We never collect form contents, search text or full IP addresses, and never sell data. Opt out with the button below, or with Global Privacy Control or Do Not Track in your browser. More about cookies and statistics.
Zorky CRMZorky CRM
EN|RU
@termdocs
← All jobs

Vulnerability Assessment and Penetration Testing, Senior Engineer

seniorofficeRiyadh, Saudi Arabia, SAScore 65/1001d ago
Market insights
📊 QA / Testing: salaries and demand on the market
Stack
active directoryawsazurecloudgcppythonruby
Apply
Upload your CV — we will connect you with the employer directly through our pool.
Send your CV →
Description
SOOR, a subsidiary of Master Works, helps organizations stay ahead of evolving cyber threats through advanced cybersecurity and secure infrastructure solutions. SOOR delivers resilient, scalable, and regulation-aligned security across governance, cloud, networks, and managed defense. SOOR is looking for a highly skilled Vulnerability Assessment and Penetration Testing Engineer, Senior to join our dynamic security services team. In this client-facing role, you will be responsible for leading complex security assessments across various industries. You will act as a subject matter expert, not only identifying critical vulnerabilities but also articulating business risks to stakeholders and guiding remediation efforts. Key Responsibilities Penetration Testing: Lead and execute end-to-end penetration tests on: Web Applications: (OWASP Top 10, API security, Business Logic flaws). Network Infrastructure: (Internal/External, Active Directory, Firewalls, Routers, etc). Source Code Review: Conduct manual and tool-assisted secure code reviews (SAST) across languages/frameworks, identify injection flaws, and provide developer-focused remediation guidance. Mobile Applications: (iOS and Android - static and dynamic analysis). Vulnerability Assessment: Conduct comprehensive vulnerability assessments and configuration reviews against industry standards (CIS, NIST). Red Teaming (Optional/Nice to Have): Participate in adversary simulation exercises, social engineering, and physical security as
Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.
Urgent question? Message @termdocs