Job Description, Responsibilities & Requirements
About the Position
Penetration Tester
Company: Evolvice GmbH
Location: 01, SAU
Employment Type: FULL_TIME
Date Posted: 2026-06-07T13:59:49.833Z
Evolvice is a nearshore technology services provider that helps businesses scale, innovate, and enhance efficiency. Since 2012, we’ve been developing software solutions and building high-performing remote teams. Today, we focus on integrating AI into business processes and providing IT and security support to drive digital transformation.
We’re proud to work with industry leaders like Bosch, Douglas, WTS, DHL, Tatweer, and GOSI, and many others. Combining German precision with nearshore agility, we provide secure, scalable, and cost-effective IT solutions tailored to your business needs.
Now we are looking for a VAPT consultant for our client.
Responsibilities
- Provide continuous on-site professional cybersecurity services at the Authority’s headquarters.
- Commitment to daily on-site attendance and work at the Authority’s premises; remote work is not permitted.
- The contractor must have proven hands-on experience in penetration testing and the areas specified within the project scope.
- The contractor must hold relevant professional certifications in the field, such as OffSec, SANS, or equivalent.
- Experience in Web Application Penetration Testing.
- Experience in Network and Infrastructure Penetration Testing.
- Ability to perform Vulnerability Assessments using specialized security tools.
- Ability to conduct Secure Code Reviews.
- Ability to prepare professional technical reports including vulnerability descriptions, impact analysis, and remediation recommendations.
- Configuration Review & Hardening
- Review operating system configurations.
- Conduct Network Device Audits, including:
- Routers
- Switches
- Firewalls
- Review and assess encryption configurations (Encryption Assessment).
- Active Directory Security Assessment
- Identify Privilege Escalation Paths.
- Review Password Policies.
- Review Dormant Admin Accounts and unmanaged privileged accounts.
- Review Domain Trusts.
- Segmentation & Lateral Movement Testing
- Assume Breach Scenario.
- API Security Testing
- Assess vulnerabilities based on the OWASP API Top 10.
- Verify authorization controls, including Broken Object Level Authorization (BOLA).
- Container & Cloud Security
- Review Identity and Access Management (IAM) permissions in cloud environments to ensure compliance with the Principle of Least Privilege.
- Conduct a comprehensive security assessment of cloud environments.
- Phishing Campaign Execution
- Conduct phishing simulation campaigns.
- Comply with all cybersecurity policies and procedures approved by the Authority.
- Ability to work effectively within a team and coordinate with various technical teams.
- The total required service effort is 4,160 hours, covering all services.
Requirements
- Proven hands-on experience in penetration testing.
- Relevant professional certifications (OffSec, SANS, or equivalent).
- Experience in Web Application Penetration Testing.
- Experience in Network and Infrastructure Penetration Testing.
- Ability to perform Vulnerability Assessments.
- Ability to conduct Secure Code Reviews.
- Ability to prepare professional technical reports.
We Offer
- Competitive salary
- Opportunity to work with industry leaders
- Professional growth and development
About the Company
Evolvice is a nearshore technology services provider that helps businesses scale, innovate, and enhance efficiency. Since 2012, we’ve been developing software solutions and building high-performing remote teams. Today, we focus on integrating AI into business processes and providing IT and security support to drive digital transformation.
We’re proud to work with industry leaders like Bosch, Douglas, WTS, DHL, Tatweer, and GOSI, and many others. Combining German precision with nearshore agility, we provide secure, scalable, and cost-effective IT solutions tailored to your business needs.
How to Apply
Use the apply form on this page. Upload your CV (PDF/DOC/DOCX, max 3MB) and our recruiters will respond within 5 business days.