Penetration Tester

About the role

The Penetration Tester will join ZainTECH’s Cybersecurity practice to perform authorized security assessments for enterprise, government and critical infrastructure clients across the MENA region. The role focuses on hands‑on offensive testing, validation of vulnerabilities and delivery of clear remediation guidance.

Key responsibilities

• Conduct penetration testing engagements on external and internal networks, web applications, APIs, wireless environments and supporting infrastructure.
• Execute testing according to approved methodologies, industry standards and customer‑defined rules of engagement.
• Identify, validate and safely demonstrate security vulnerabilities, assess exploitability, business impact and risk exposure.
• Perform security validation and retesting after remediation efforts.
• Analyze vulnerabilities to determine business impact and produce detailed technical findings and remediation recommendations.
• Prepare high‑quality penetration testing reports that include vulnerability details, risk ratings, attack scenarios, business impact and remediation guidance.
• Maintain strict confidentiality, protect customer data during testing and comply with regulatory, contractual and legal requirements, including NCSC Jordan licensing.
• Stay current on emerging threats, attack techniques, vulnerability trends and offensive security tools, contributing to methodology and tool improvements.
• Collaborate with penetration testing team leaders, cybersecurity consultants, security architects and managed security services teams.

Required profile

• Proven hands‑on experience in offensive security testing and vulnerability validation.
• Ability to work with customers and stakeholders across the MENA region.
• Familiarity with regulatory and licensing requirements for penetration testing, such as NCSC Jordan.
• Commitment to maintaining confidentiality and adhering to strict testing governance.

Required skills

• Network penetration testing
• Web application and API testing
• Wireless security testing
• Infrastructure security assessments
• Vulnerability analysis and reporting
• Knowledge of industry standards and testing methodologies
• Experience with offensive security tools and techniques