Senior Penetration Testing Engineer

About the role

Boutiqaat is looking for a Senior Penetration Testing Engineer to strengthen the security of its fast‑growing e‑commerce platform across the Middle East. You will lead advanced security assessments, simulate real‑world attacks, and work closely with development and IT teams to embed security throughout the software lifecycle.

Key responsibilities

• Perform advanced penetration tests on web, mobile, API, network and cloud infrastructure.
• Identify, exploit and document vulnerabilities, providing clear remediation guidance.
• Simulate realistic attack scenarios and participate in Red/Blue Team exercises.
• Collaborate with Development and IT to integrate security into DevSecOps pipelines.
• Conduct threat modeling, risk assessments and develop custom testing tools.
• Produce detailed assessment reports for technical and business stakeholders.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or a related field.
• 3+ years of hands‑on penetration testing experience.
• Relevant certifications such as OSCP, OSWE, GPEN are preferred.
• Strong reporting skills with the ability to translate technical findings into business impact.

Required skills

• Proficiency with Burp Suite, Nmap, Metasploit, Kali Linux and Nessus.
• Deep knowledge of OWASP Top 10, network security and exploit development.
• Scripting in Python, Bash or PowerShell.
• Familiarity with cloud platforms AWS, Azure or GCP.

What we offer

• Opportunity to work in a dynamic regional e‑commerce leader.
• Exposure to high‑impact security challenges and continuous learning.
• Collaborative environment with cross‑functional engineering teams.