Penetration Tester

Hays is seeking a Penetration Tester to join a rapidly growing international cybersecurity consulting firm in Dubai, United Arab Emirates. This role involves identifying vulnerabilities and simulating cyber attacks for enterprise clients across the GCC.

At Hays, we believe the right job can transform a person's life and the right person can transform a business. We connect ambition with opportunity, helping people and organisations reimagine what’s possible. With operations in 30 countries, we fill around 1,000 roles every working day.

If you are interested in this opportunity, click 'apply now' to submit an up-to-date copy of your CV.

Company Overview

Hays is a global recruitment company that places over 200,000 professionals into new roles annually. They operate in 30 countries with over 200 offices and 9,500 colleagues worldwide, providing tailored advice and market intelligence to accelerate careers and build recruitment solutions.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Experience: 3 Year+
• Qualifications: Professional Certifications

Key Responsibilities

• Performing black-box, grey-box, and white-box penetration testing across web apps, iOS/Android platforms, REST APIs, microservices, and modern web architectures in line with OWASP frameworks.
• Executing advanced testing techniques such as authentication bypass, session hijacking, API exploitation, and mobile reverse engineering using tools like Frida, Objection, and JADX.
• Assessing business risk, drafting technical reports and executive summaries, and presenting actionable remediation roadmaps directly to enterprise clients across the GCC.
• Utilizing and customizing industry-standard tools (Burp Suite, OWASP ZAP, Metasploit, MobSF) while contributing to internal security research and red-team exercises.

Requirements

• Must be currently residing in the UAE (with willingness to travel within the GCC for occasional on-site engagements).
• Dedicated, hands-on application security testing experience (web and/or mobile).
• Deep understanding of web/mobile technologies, HTTP/S protocols, REST API security, mobile platform risks (iOS/Android), and OWASP Top 10 / OWASP Mobile Top 10 standards.
• Familiarity with mobile app reverse engineering tools (Frida, Objection, JADX) and custom script development.
• Fluent English communication and report-writing skills (Arabic is a strong advantage) paired with strong client-facing presentation abilities.

Benefits

• Direct exposure to diverse, high-impact offensive security engagements across the GCC region.
• A collaborative, continuous-learning culture with dedicated support for cybersecurity research, labs, and professional certifications.
• Significant opportunity to shape security operations and grow within a fast-expanding international cybersecurity consultancy.
• Based in Dubai, UAE—one of the world's most dynamic digital and financial hubs.