Senior Pentration Tester

[b]About Paymob [b] Paymob is a leading FinTech company revolutionizing payment solutions in the MENA region. At Paymob, we believe in enabling businesses to thrive by offering secure, innovative, and scalable tools that simplify payments for everyone. We’re proud to power millions of transactions for some of the biggest names in the region, with a team of innovators spread across Egypt, UAE, KSA and Oman. We foster a value driven culture focused on continuous learning, empowering our people, and collaborating as one global team to create real impact. [b]Job purpose:[b] Performing authorized tests on applications to expose weaknesses in their security that could be exploited by criminals. Using these test results to develop recommendations and implement solutions to build the strength of an organization’s applications.[b][b][b][b]

[b]Key Responsibilities:[b] [ml][li indent=0 align=left]Perform penetration tests on web and mobile applications and review source code to select the best method of security to proceed as per applications’ classification.[li][li indent=0 align=left][li][li indent=0 align=left]Pinpoint methods and entry points which attackers may use to exploit vulnerabilities or weaknesses in security systems.[li][li indent=0 align=left][li][li indent=0 align=left]Write security assessment reports, after conducting research and tests, then document findings, write security reports, and discuss solutions with Engineering and management teams.[li][li indent=0 align=left][li][li indent=0 align=left]Review and provide feedback for information security fixes, then align with engineering team to make sure of bugs’ mitigation.[li][li indent=0 align=left][li][li indent=0 align=left]Assist with the overall business technology, plan and provide a current knowledge and future vision of technology and systems to ensure all company’s technologies aligned with cybersecurity strategies.[li][li indent=0 align=left][li][li indent=0 align=left]Find weaknesses in common software and web applications to identify areas where improvement is needed in security education and awareness for users, also to stay updated on the latest malware and security threats.[li][li indent=0 align=left][li][li indent=0 align=left]Establish improvements for existing security services, including hardware, software, policies, and procedures, and be sensitive to corporate considerations when performing testing (i.e., minimize downtime and loss of employee productivity).[li][li indent=0 align=left][li][li indent=0 align=left]Provide guidance and support to junior cyber assessments engineers, helping them develop their skills and ensuring the successful execution of their tasks and projects.[li][li indent=0 align=left][ml][li][b][b]

[b]What We're Looking For: [b] [ml][li indent=0 align=left]Bachelor’s degree in communication engineering or computer science[li][li indent=0 align=left][li][li indent=0 align=left]4+ years of experience in Penetration Testing.[li][li indent=0 align=left][li][li indent=0 align=left]Experience in Penetration Test Tools [li][li indent=0 align=left][li][li indent=0 align=left]Good knowledge in programming and scripting in Bash, Python[li][li indent=0 align=left][li][li indent=0 align=left]Vulnerability Assessment of various web applications used in the organization using Burp Suite, and Nessus.[li][li indent=0 align=left][li][li indent=0 align=left]Security assessment of online applications to identify the vulnerabilities in different categories like Input and data.[li][li indent=0 align=left][li][li indent=0 align=left]Validation, Authentication, Authorization, Auditing & logging.[li][li indent=0 align=left][li][li indent=0 align=left]Acquainted with various approaches to Grey & Black box security testing.[li][li indent=0 align=left][li][li indent=0 align=left]Proficient in understanding application level vulnerabilities like XSS, SQL Injection, CSRF, authentication bypass, weak cryptography, authentication flaws etc.[li][li indent=0 align=left][li][li indent=0 align=left]Skilled using Burp Suite, Acunetix Automatic Scanner, NMAP.[li][li indent=0 align=left][li][li indent=0 align=left]Experience in using Kali Linux to do web application assessments with tools like Dirbuster, Nikto, and Nmap.[li][li indent=0 align=left][ml][li][b][b]

[b]Why You’ll Love It Here:[b] At Paymob, our people are at the core of everything we do. Our culture is built around values that drive how we work, grow, and succeed together: [ml][li indent=0 align=left]We offer competitive compensation packages and performance driven incentive programs.[li][li indent=0 align=left][li][li indent=0 align=left]We offer a flexible hybrid work model that supports both in office collaboration and remote productivity.[li][li indent=0 align=left][li][li indent=0 align=left]We invest in continuous career coaching to support your growth and long-term development.[li][li indent=0 align=left][li][li indent=0 align=left]We collaborate across borders, embracing diversity and shared success.[li][li indent=0 align=left][ml][li][b][b]