search Browse Jobs
Cybersecurity Consultant TVANTT Ltd · Riyadh, Saudi Arabia
NTT Ltd logo

NTT Ltd

company page ↗

Cybersecurity Consultant TVA

🗓️ Posted 2026-09-29 Riyadh, Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 18,000–SAR 35,000/mo

About the Company

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

About the Role

The Cybersecurity Consultant is a hands on cybersecurity professional responsible for conducting vulnerability assessments, penetration testing activities, and security reviews across customer environments. This role works closely with customers, infrastructure teams, application owners, and security stakeholders to identify security weaknesses, validate risks, and provide practical remediation recommendations. The role combines technical security testing, customer engagement, and cybersecurity consultancy to help organizations strengthen their security posture, reduce risk, and improve compliance with security best practices and regulatory requirements.

Responsibilities

  • ● Conduct vulnerability assessments and penetration tests across network, infrastructure, server, application, and cloud environments.
  • ● Perform internal and external network penetration testing within approved scopes and rules of engagement.
  • ● Conduct web application and API security assessments using recognized industry methodologies and frameworks.
  • ● Perform authenticated and unauthenticated vulnerability scanning using approved commercial and open-source security tools.
  • ● Validate vulnerabilities identified by automated tools and remove false positives before reporting.
  • ● Perform controlled exploitation activities to confirm vulnerability impact while minimizing operational risk.
  • ● Assess Windows, Linux, Active Directory, databases, network devices, and security infrastructure for security weaknesses.
  • ● Evaluate vulnerabilities based on exploitability, asset criticality, technical severity, and business impact.
  • ● Assign risk ratings using CVSS and applicable customer risk-classification methodologies.
  • ● Prepare technical assessment reports, executive summaries, and remediation recommendations.
  • ● Present assessment findings and risk remediation plans to technical and business stakeholders.
  • ● Conduct remediation workshops and provide technical guidance to customer teams.
  • ● Perform remediation validation and retesting activities.
  • ● Maintain assessment evidence, testing records, screenshots, tool outputs, and supporting documentation.
  • ● Support assessment planning activities, including scope definition, methodology selection, and rules of engagement.
  • ● Ensure all testing activities comply with approved authorization requirements and security testing procedures.
  • ● Support security consulting initiatives related to system hardening, vulnerability remediation, application security, and infrastructure security.
  • ● Assist with security assessments aligned to recognized frameworks including NCA ECC, SAMA CSF, ISO 27001, CIS Controls, and PCI DSS.
  • ● Contribute to continuous improvement of internal security testing methodologies, reporting templates, and knowledge repositories.
  • ● Support presales activities by providing technical input for customer proposals, assessment scope definitions, and effort estimates.
  • ● Perform any other cybersecurity consulting, vulnerability management, or penetration testing activities as required.

Requirements

  • ● Strong understanding of vulnerability assessment and penetration testing methodologies.
  • ● Hands on experience conducting network, infrastructure, web application, and API security testing.
  • ● Strong knowledge of TCP/IP networking, routing, switching, DNS, HTTP/HTTPS, VPNs, firewalls, and enterprise network services.
  • ● Good working knowledge of Windows, Linux, and Active Directory environments.
  • ● Familiarity with common attack techniques including privilege escalation, credential attacks, lateral movement, and Active Directory exploitation.