search Browse Jobs
Consultant Manager Cyber Operate Penetration TesterDeloitte & Touche (M.E.) · Saudi Arabia

Deloitte & Touche (M.E.)

company page ↗

Consultant Manager Cyber Operate Penetration Tester

🗓️ Posted 2026-10-09 Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 35,000–SAR 45,000/mo

About the Company

About Deloitte When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, Best Consulting Firm, and the Middle East Training & Development Excellence Award. Our Purpose Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most-for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities. Our shared values guide the way we behave to make a positive, enduring impact: During your tenure as a Consultant - Manager, you will demonstrate and develop your capabilities in the following areas. Plan and scope engagements Agree scope, objectives, rules of engagement and test windows with system owners, and obtain written authorisation before any testing Choose the right approach for each target: black-box, grey-box or white-box, external or internal, announced or unannounced Follow a defined methodology (NIST SP 800-115, PTES, OWASP) and keep testing safe for li

Requirements

  • ● Years of experience: 2-7 total years
  • ● Bachelor's in cybersecurity, computer science or a related field, or equivalent practical experience
  • ● Hands-on experience delivering penetration tests for real organisations, not only labs or CTFs
  • ● Strong with core tools: Burp Suite, Nmap, Metasploit, BloodHound and common post-exploitation frameworks
  • ● Scripting in Python, Bash or PowerShell
  • ● Strong report writing in English
  • ● A recognised hands-on offensive certification (e.g. OSCP) for Mid and Senior levels
  • ● Red team experience with C2 frameworks (e.g. Cobalt Strike, Sliver, Mythic) is preferred
  • ● Mobile application and cloud penetration testing experience is preferred
  • ● Exploit development or code review skills is preferred
  • ● Arabic language is preferred
  • ● At least one preferred: OSCP, CREST CRT/CCT, GPEN. Also valued: OSEP, OSWE, CRTO, GWAPT, eCPPT/eWPT, PNPT. CEH is accepted at Junior level only.
  • ● Frameworks & Standards: NCA ECC-2:2024 (penetration testing), NIST SP 800-115, PTES, OWASP WSTG / ASVS / MASTG, MITRE ATT&CK, CREST methodology