Application Security Management Consultant – Cyber (Kuwait)

About the role

Deloitte & Touche (M.E.) LLP is seeking a Cyber Application Security Management Consultant to lead penetration testing, secure configuration reviews, and vulnerability assessments for clients in Kuwait and the wider region. The role combines hands‑on technical work with client‑facing communication, supporting security engagements across multiple platforms.

Key responsibilities

• Perform internal and external penetration testing.
• Conduct web, mobile, and API security testing.
• Execute secure configuration reviews and cloud security assessments.
• Prepare technical reports and documentation for findings.
• Engage with clients to discuss results and remediation steps.
• Support proposal preparation, technical scoping, and validation of remediation.

Required profile

• 2–5 years of experience in cybersecurity or penetration testing.
• Strong understanding of networking, web technologies, mobile security, and Active Directory environments.
• Ability to work independently in client‑facing environments.
• Good reporting and communication skills.
• Relevant certifications (e.g., OSCP, CRTO, PNPT, CRTP, CPTS, eMAPT) are preferred.

Required skills

• Penetration testing
• Web application testing
• Mobile application testing
• API security testing
• Secure configuration reviews
• Cloud security assessments
• Networking
• Web technologies
• Mobile security
• Active Directory
• Security testing tools
• OWASP Top 10 knowledge