search Browse Jobs
Penetration TesterHWG · Dubai, Dubai, United Arab Emirates
HWG logo

HWG

company page ↗

Penetration Tester

🗓️ Posted 2026-09-28 Dubai, Dubai, United Arab Emirates Full-time Hybrid ICT
💰 Salary Not shared 📊 Market AED 15,000–AED 25,000/mo

About the Company

We are looking for a highly skilled and motivated Penetration Tester specialized in Web and Mobile Applications to join our cybersecurity offensive team. The successful candidate will be responsible for identifying vulnerabilities, simulating real-world attacks, and supporting clients in strengthening their application security posture. This role requires strong technical expertise, hands-on experience in offensive security, and the ability to clearly communicate findings to both technical and non-technical stakeholders.

Responsibilities

  • ● Perform black-box, grey-box, and white-box penetration testing on web and mobile applications
  • ● Identify, exploit, and document vulnerabilities in accordance with industry standards (e.g., OWASP Top 10, OWASP Mobile Top 10)
  • ● Conduct secure code reviews when required
  • ● Analyse vulnerabilities and assess their business and technical impact
  • ● Produce detailed and high-quality penetration testing reports, including:
  • ● Executive summaries
  • ● Technical findings
  • ● Risk ratings and remediation recommendations
  • ● Present findings to clients and support remediation discussions
  • ● Perform advanced testing techniques such as authentication bypass, session management attacks, API testing, and mobile reverse engineering
  • ● Test REST APIs, microservices, and modern web architectures
  • ● Support red team exercises when required
  • ● Use industry-standard tools such as Burp Suite, OWASP ZAP, Metasploit, MobSF, Frida, and others
  • ● Develop custom scripts or tools to support testing activities
  • ● Follow structured methodologies and frameworks (OWASP, PTES, etc.)
  • ● Interact directly with clients to understand application architecture and testing scope
  • ● Provide clear and actionable remediation guidance
  • ● Support re-testing and validation of fixes
  • ● Stay up to date with emerging vulnerabilities, attack techniques, and security trends
  • ● Contribute to internal knowledge sharing, labs, and research initiatives
  • ● Participate in training, certifications, and cybersecurity events
  • ● Degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
  • ● Minimum 2 years of experience in application security testing (web and/or mobile)
  • ● Strong knowledge of web technologies (HTTP/S, APIs, authentication mechanisms, etc.)
  • ● Experience with mobile platforms (iOS, Android) and related security risks
  • ● Hands-on experience with penetration testing tools (Burp Suite, etc.)
  • ● Solid understanding of OWASP Top 10 and secure coding practices
  • ● Strong reporting and communication skills in English
  • ● Residence in UAE
  • ● Relevant certifications (e.g., OSCP, OSWE, eWPT, eMAPT, CEH)
  • ● Experience with mobile app reverse engineering (Frida, Objection, JADX, etc.)
  • ● Familiarity with cloud environments and API security testing
  • ● Experience working with clients in the GCC region
  • ● Strong analytical mindset and attention to detail
  • ● Excellent interpersonal and teamwork abilities
  • ● Flexibility and composure under stressful situations
  • ● Willingness to travel within the GCC for on-site engagements if required
  • ● Excellent communication skills in English (Arabic is a strong advantage)

Benefits

  • ● Opportunity to work in a growing cybersecurity environment
  • ● Collaborative and dynamic team culture
  • ● Real impact on security operations and client success