{"id":3091957,"url":"https://alion.io/job/elm-consultant-cybersecurity-penetration-testing","title":"Consultant - Cybersecurity, Penetration Testing","company":{"id":48899,"name":"Elm","domain":"elm.sa","url":"https://alion.io/company/elm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riyadh, Saudi Arabia"],"countries":["SA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":89000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-22T15:08:39Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-25T06:17:42Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\n\nOVERVIEW\n\nJob Title\n\nConsultant\n\nJob Code\n\n733155\n\nGrade\n\nI3\n\nGroup\n\nLegal, Risk & Governance\n\nDivision\n\nTechnology\n\nDepartment\n\nCybersecurity\n\nUnit\n\nPT&VA\n\nROLE PURPOSE\nThe aim is to state the overall significance of the job from the organization’s perspective.\n\nThe role exists to support the identification and assessment of cybersecurity weaknesses through the planning and execution of authorized penetration testing engagements across applications, infrastructure, and other agreed technology environments. The role provides technical analysis and practical remediation recommendations, validates corrective actions, and contributes to the continuous improvement of penetration testing practices to strengthen the organization’s cybersecurity posture.\n\nKEY ACCOUNTABILITIES & ACTIVITIES\nThis section describes the principal outputs required from the job.\n\nKey Accountabilities\n\nKey Activities\n\nEngagement Scoping & Planning\n\nDefine testing objectives, scope, prerequisites, and deliverables with asset owners and relevant cybersecurity stakeholders.\nPrepare engagement plans and rules of engagement covering authorization, permitted techniques, testing windows, and escalation arrangements.\nAssess testing risks and coordinate access and operational safeguards before commencing approved activities.\n\nApplication & API Penetration Testing\n\nPerform authorized penetration testing of web applications, mobile applications, and APIs within the agreed scope.\nAssess authentication, authorization, session management, input handling, and business logic controls using manual and automated techniques.\nValidate identified weaknesses and document reproducible evidence and potential business impacts.\n\nInfrastructure & Platform Penetration Testing\n\nAssess in-scope internal and external networks, systems, and cloud environments for exploitable weaknesses and configuration gaps.\nEvaluate attack paths, privilege boundaries, and exposure of sensitive services through controlled testing within approved limits.\nCoordinate with technical owners to manage testing dependencies and promptly escalate unexpected operational impacts.\n\nVulnerability Validation & Risk Analysis\n\nAnalyze testing results, remove false positives, and assess the exploitability and impact of confirmed findings.\nPrioritize findings using the approved risk assessment approach, considering asset criticality, exposure, and compensating controls.\nIdentify related weaknesses and attack chains to explain potential impacts on critical services and information assets.\n\nTechnical Reporting & Remediation Advisory\n\nProduce penetration testing reports covering scope, approach, findings, supporting evidence, risk ratings, and remediation recommendations.\nCommunicate technical findings and business implications to asset owners and relevant stakeholders.\nAdvise technical teams on practical corrective measures and clarify findings throughout remediation.\n\nRemediation Validation & Closure\n\nConduct retesting to verify corrective actions and assess whether identified weaknesses have been adequately addressed.\nMaintain accurate finding status and supporting evidence, and escalate overdue or unresolved issues through established channels.\nDocument residual weaknesses and provide technical input to formal closure or risk acceptance decisions by authorized owners.\n\nTesting Methods, Tools & Quality\n\nMaintain and improve testing procedures, checklists, and reusable scripts in line with approved methodologies.\nEvaluate testing tools and techniques in controlled environments and recommend improvements to coverage and efficiency.\nReview technical evidence and reports, share specialist knowledge, and provide guidance to colleagues to support consistent testing quality.\n\nStakeholder Coordination & Technical Research\n\nCoordinate engagement schedules, dependencies, and deliverables with business stakeholders, technology teams, and external testing providers.\nResearch emerging vulnerabilities and attack techniques relevant to the organization’s technology landscape and incorporate applicable scenarios into approved testing.\nMaintain engagement records and handle credentials, test data, and evidence securely throughout testing and closure.\n\nPolicies, Processes & Procedures\n\nFollow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.\nComply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.\n\nInformation Security\n\nComply with all relevant information security practices and standards to ensure data integrity and confidentiality.\n\nJOB SPECIFICATIONS\n\nAcademic and professional qualifications\n\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.\nRelevant professional certifications in penetration testing or offensive security are considered an advantage.\n\nYears and Nature of Experience\n\n4-6 years of experience in penetration testing, vulnerability assessment, or offensive security, including hands-on testing, technical reporting, and remediation validation","description_format":"text","description_chars":5228,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-22T15:08:39Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":23,"reasons":["conf:4","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/elm-consultant-cybersecurity-penetration-testing","json_url":"https://alion.io/job/elm-consultant-cybersecurity-penetration-testing.json","meta":{"generated_at":"2026-10-25T11:49:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17011,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48899},"rest":"https://alion.io/mcp/rest/get_company?id=48899"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felm-consultant-cybersecurity-penetration-testing"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felm-consultant-cybersecurity-penetration-testing"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felm-consultant-cybersecurity-penetration-testing"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/elm-consultant-cybersecurity-penetration-testing\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felm-consultant-cybersecurity-penetration-testing"}]}