Penetration Tester

Guildhall is supporting a leading fintech services company that is hiring a Penetration Tester to join its cybersecurity team. This role will be responsible for conducting comprehensive security assessments across web and mobile applications, networks, and cloud infrastructures. Based in Dubai, this is a hands-on role requiring a strong offensive security background and the ability to provide actionable remediation guidance to both technical and non-technical stakeholders.

Key Responsibilities:

- Conduct detailed penetration tests on web, mobile, APIs, and corporate networks to identify vulnerabilities.

- Analyze and validate findings, assess risk and impact, and produce clear reports with actionable recommendations.

- Collaborate with development, DevOps, and IT teams to remediate security issues and advise on secure coding practices.

- Simulate advanced attacker techniques (red team activities) to test detection and response capabilities.

- Utilize and customize leading pentesting tools (Burp Suite, Metasploit, Nmap) and develop automation scripts in Python, Bash, or PowerShell.

- Ensure testing aligns with industry standards (OWASP, SANS, CWE) and supports compliance requirements (PCI-DSS, DESC).

Candidate Profile:

- 5+ years of hands-on penetration testing, ethical hacking, or red team experience, preferably within fintech or complex enterprise environments.

- Proficient in application security, network penetration, Linux/Windows environments, and cloud platforms.

- Professional certifications such as OSCP, GPEN/GWAPT, CREST CRT, or CEH are highly valued.

- Strong communicator in English, able to write clear reports and explain findings to developers and executives.

- Passion for cybersecurity, problem-solving, and continuous learning, with a track record in bug bounty programs or security research considered a plus.