Cybersecurity Penetration Tester Team Leader

Description

CCDS is seeking a highly skilled and dynamic Cybersecurity PT Team Leader to lead our offensive security team. In this leadership role, you will drive strategic penetration testing and vulnerability discovery efforts, guiding a team of expert testers and bug hunters to uncover security weaknesses and simulate real-world attack scenarios. You will collaborate closely with clients and internal stakeholders to ensure comprehensive security assessments and actionable mitigation recommendations.

Key Responsibilities

• Lead, mentor, and manage a team of penetration testers and bug hunters focused on red teaming engagements.
• Plan, coordinate, and execute complex penetration tests and vulnerability assessments across diverse environments and technologies.
• Develop and refine testing methodologies, playbooks, and tools to enhance team effectiveness.
• Conduct advanced threat simulations including social engineering, network exploitation, and application attacks to evaluate client security posture.
• Analyze and validate discovered vulnerabilities, correlating findings into clear and prioritized reports.
• Engage with clients to communicate findings, risk impacts, and remediation strategies effectively.
• Stay current with emerging threats, hacking techniques, and security technologies to maintain cutting-edge team capabilities.

Requirements

• Proven experience (minimum 7 years) in penetration testing, red teaming, vulnerability research, and bug hunting.
• At least 2 years in a leadership or team lead role within cybersecurity offensive operations.
• Extensive hands-on experience with red team tools and frameworks such as Cobalt Strike, Metasploit, Burp Suite, BloodHound, and related utilities.
• Strong understanding of network protocols, operating systems (Windows, Linux), cloud security, and application security.
• Ability to develop and document complex attack scenarios and playbooks.
• Excellent communication and leadership skills, capable of managing technical teams and liaising with clients at various levels.
• Relevant certifications such as OSCP, OSCE, CRTO, CISSP, or equivalent are highly preferred.
• Strong problem-solving skills and the ability to think like a malicious threat actor.
• Saudi nationality preference as per company policy.

Benefits

• Medical insurance
• Paid time off
• Training & development
• Performance bonus