Attack Surface Management Consultant (Cybersecurity)

About the role

The role involves delivering penetration testing, secure configuration reviews, and vulnerability assessments for clients across Kuwait and the wider region. You will support client‑facing security engagements, providing technical expertise and guidance.

Key responsibilities

• Internal and external penetration testing
• Web application penetration testing
• Mobile application penetration testing
• API security testing
• Secure configuration reviews
• Cloud security assessments (optional)
• Technical reporting and documentation
• Client communication and technical discussions
• Support proposal preparation, technical scoping, and remediation validation

Required profile

• 2–5 years of experience in cybersecurity or penetration testing
• Strong understanding of networking, web technologies, mobile security, and Active Directory environments
• Hands‑on experience with security testing tools and methodologies
• Knowledge of OWASP Top 10, common attack vectors, and security best practices
• Good reporting and communication skills
• Relevant certifications preferred (e.g., OSCP, CRTO, PNPT, CRTP, CPTS, eMAPT)
• Ability to work independently in client‑facing environments

Required skills

• Penetration testing
• Web application security testing
• Mobile application security testing
• API security testing
• Secure configuration reviews
• Cloud security assessments
• Vulnerability assessments
• Networking
• Web technologies
• Mobile security
• Active Directory
• OWASP Top 10
• Security testing tools