5 Educational Testing jobs in Saudi Arabia

Company Overview:

Advanced technology and cybersecurity company (sirar) established by stc, the region's ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments.

As experts in business security and privacy.

We offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

Key Responsibilities:

• Identifies methods that attackers could use to exploit system and network vulnerabilities.
• Mimics malicious social engineering techniques that an attacker would use to attempt a system breach to uncover security gaps and vulnerabilities.
• Gathers information about network topography and usage through technical analysis and open-source research and document findings.
• Uses security testing and code scanning tools to conduct code reviews.
• Recommends security controls to mitigate risks identified through testing and review.
• Conducts required reviews, including reviews of defensive measures, according to the organization's policies.
• Conducts authorized penetration testing of infrastructure and assets.
• Performs technical and nontechnical risk and vulnerability assessments of organizational technology environments.
• Maintains a deployable cyber defense audit toolkit based on industry best practice to support cyber defense audits.
• Tests for vulnerabilities in web applications, client applications and standard applications.
• Conducts physical security assessments of servers, systems, and network devices.
• Reports penetration testing and vulnerability assessment findings including risk level, proposed mitigation, and details necessary to reproduce the test results.
• Explains business impact of vulnerabilities identified through testing to make case for addressing them.
• Presents test findings, risks, and conclusions to technical and non-technical audiences.
• Designs simulated attacks to reflect impact in the organization's business and its users.
• Supports in collaborating with cybersecurity vendors to drive innovation in Penetration Testing services development and manage overall Penetration Testing service lifecycle.
• Supports in leading the implementation of go-to-market and roadmap for Penetration Testing services solutions & tools.
• Supports in developing Penetration Testing Services' lifecycle end-to-end, including Ideation, feasibility analysis, planning, sourcing, business case, toolkits and operating models design, commercialization, launch, performance management, and retirement, in collaboration with other Advisory sections.
• Contributes to the overall success of the company by performing all other duties and responsibilities as assigned by line manager.

Qualification:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

Professional Certificate:

• Offensive Security (OSCP, OSWP, OSWE, OSEP, etc)
• GIAC (GXPN, GCPN, GAWN, GPYC, etc)
• Pen tester Academy (Red Team Expert)

Years of Experience:

• 3 – 5 years in relevant experience

Skills:

• Advance proficiency in conducting vulnerability scans and determine vulnerabilities from the results.
• Intermediate proficiency in conducting penetration testing in line with the organization's policies and best practice.
• Advance proficiency in developing insights about an organization's threat environment.
• Advance proficiency in analyzing vulnerability and configuration data to identify cybersecurity issues
• Advance proficiency in mimicking threat behaviors.
• Intermediate proficiency in implementing adversary Tactics, Techniques and Procedures.
• Basic proficiency in service development.
• Basic proficiency in user experience knowledge.
• Basic proficiency in recognizing industry trends & KPIs

Company Overview:

Advanced technology and cybersecurity company (sirar) established by stc, the region's ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments. As experts in business security and privacy. We offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

Key Responsibilities:

• Participates in reporting penetration testing and vulnerability assessment findings including risk level, proposed mitigation and details necessary to reproduce the test results.
• Identifies methods that attackers could use to exploit system and network vulnerabilities.
• Mimics malicious social engineering techniques that an attacker would use to attempt a system breach to uncover security gaps and vulnerabilities.
• Gathers information about network topography and usage through technical analysis and open-source research and document findings.
• Uses security testing and code scanning tools to conduct code reviews.
• Conducts authorized penetration testing of infrastructure and assets.
• Performs technical and non-technical risk and vulnerability assessments of organizational technology environments.
• Tests for vulnerabilities in web applications, client applications, and standard applications.
• Conducts physical security assessments of servers, systems and network devices.
• Participates in explaining business impact of vulnerabilities identified through testing to make case for addressing them.
• Presents test findings, risks, and conclusions to technical and non-technical audiences.
• Participates in designing complex simulated attacks to reflect impact in the organization's business and its users.
• Contributes to the overall success of the company by performing all other duties and responsibilities as assigned by line manager.

Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
• Master's degree in Cybersecurity, Computer Science/Information Technology or related discipline is preferred.

Professional Certifications Preferred:

• Relevant certification in technology Security (CISSP, CAP, SSCP, (ISC)2, CCFP, CISM etc.) is preferred. ISO 27001 Lead Implementor, Lead Auditor.

Years of Experience:

• 3-5 years in relevant experience.

Skills:

• Intermediate proficiency in data collection and analysis.
• Intermediate proficiency in reporting skills and recommending actions to be taken.
• Intermediate proficiency in reviewing and editing cybersecurity related plans.
• Intermediate proficiency in identifying gaps and limitations in cyber threat intelligence provision.
• Intermediate proficiency in developing, deploying, and integrating policies that meet organizational system cybersecurity objectives.

Purpose of Job
Jobholders at this level are responsible for leading work activities and working autonomously with minor direction towards predetermined long-term objectives. Jobholders oversee the implementation of operational plans and the provision of significant improvements to set policies, procedures, standards and reports. Their main operational roles include managing the implementation of services development change initiatives and projects, monitoring transition tools and activities, ensuring successful implementation of testing cycles, and delivering trainings in order to help business users adapt to changes within established timeline in coordination with relevant IT functions

Job Responsibilities

• Develop communication channels with relevant IT functions to coordinate new projects' and changes' release time and date and avoid disruption in operations
• Develop transition Guide, testing templates and checklists to ensure that new projects and changes are smoothly and effectively integrated into business operations
• Participate in workshops with Operations functions to ensure awareness of new changes in processes and IT system
• Conduct meetings with operation functions to capture users' terms and conditions related to new projects and change requests
• Liaise with IT functions for walkthrough sessions following the end of the development phase in projects, changes and production bugs and coordinate with internal stakeholders for the collection of needed data
• Gather and consolidate required testing data to enable the initial testing process
• Perform initial testing for changes and projects prior to final release to recommend improvements on observed disruptions and bugs
• Identify and consolidate operational bugs, weaknesses and malfunctions, and forward issues to IT functions while following up for timely resolution
• Coordinate the integration testing phase with IT and business owners to handle integration issues and provide support when needed
• Deliver trainings and awareness sessions on newly deployed changes, solutions and technologies in order to increase knowledge and skills of users
• Develop the "go-live" plan and related activities, test for the reliability, integrity and accuracy of changes and new projects and manage the successful execution of the smoke test
• Monitor the continuous performance of installed systems, handle post production issues and ensure timely resolution
• Develop reports on UAT progress and testing updates, highlight observations and communicate improvement opportunities with relevant stakeholders
• Coordinate with relevant operational support areas to ensure improvement actions related are being implemented
• Follow-up on requests submitted to IT functions and align on completion dates and expected milestones
• Follow all relevant policies, processes and standard operating procedures so that work is carried out in a controlled and consistent manner
• Help in solving escalated problems and provide needed support for junior team to ensure work is carried out in an efficient manner
• Escalate complex problems to the relevant person to ensure cases/issues are closed properly
• Perform other duties as requested
• Train junior staff on the different job activities to ensure transfer of know-how, when applicable
• Provide clear direction, prioritize tasks, assign and delegate responsibility, and monitor the workflow of subordinates/ junior staff
• Support junior staff or direct reports in order to execute their duties according to set policies and processes

Job Details
Communication and Contacs
Education
Bachelor's degree Business Administration or equivalent is required

Experience
A minimum of 4 years of relevant experience

Competencies
Collaboration and Communication - Developing

Professionalism - Proficient

Project Management - Proficient

IT Compliance - Proficient

Solutions Requirements Planning and Articulation - Proficient

IT Change Management - Proficient

Results Oriented - Proficient

Business Solutions Testing and Quality Control - Advanced

Customer Focus - Proficient

Enablement of Change and Innovation - Developing

Purpose of Job
Jobholders at this level are experienced professionals capable of conducting work with general directions. They are primarily concerned with developing solutions to challenges which require some analysis to understand and resolve, and addressing issues escalated from more junior levels. They undertake complex operational activities including analyzing and evaluating bugs for operations' applications and systems and communicating with IT functions to ensure proper resolution to avoid disruptions in operations

Job Responsibilities

• Develop communication channels with relevant IT functions to coordinate new projects' and changes' release time and date and avoid disruption in operations
• Develop transition Guide, testing templates and checklists to ensure that new projects and changes are smoothly and effectively integrated into business operations
• Participate in workshops with Operations functions to ensure awareness of new changes in processes and IT system
• Conduct meetings with operation functions to capture users' terms and conditions related to new projects and change requests
• Liaise with IT functions for walkthrough sessions following the end of the development phase in projects, changes and production bugs and coordinate with internal stakeholders for the collection of needed data
• Gather and consolidate required testing data to enable the initial testing process
• Perform initial testing for changes and projects prior to final release to recommend improvements on observed disruptions and bugs
• Identify and consolidate operational bugs, weaknesses and malfunctions, and forward issues to IT functions while following up for timely resolution
• Coordinate the integration testing phase with IT and business owners to handle integration issues and provide support when needed
• Deliver trainings and awareness sessions on newly deployed changes, solutions and technologies in order to increase knowledge and skills of users
• Develop the "go-live" plan and related activities, test for the reliability, integrity and accuracy of changes and new projects and manage the successful execution of the smoke test
• Monitor the continuous performance of installed systems, handle post production issues and ensure timely resolution
• Develop reports on UAT progress and testing updates, highlight observations and communicate improvement opportunities with relevant stakeholders
• Coordinate with relevant operational support areas to ensure improvement actions related are being implemented
• Follow-up on requests submitted to IT functions and align on completion dates and expected milestones
• Follow all relevant policies, processes and standard operating procedures so that work is carried out in a controlled and consistent manner
• Help in solving escalated problems and provide needed support for junior team to ensure work is carried out in an efficient manner
• Escalate complex problems to the relevant person to ensure cases/issues are closed properly
• Perform other duties as requested
• Train junior staff on the different job activities to ensure transfer of know-how, when applicable
• Provide clear direction, prioritize tasks, assign and delegate responsibility, and monitor the workflow of subordinates/ junior staff
• Support junior staff or direct reports in order to execute their duties according to set policies and processes

Job Details
Communication and Contacs
Education
Bachelor's degree Business Administration or equivalent is required

Experience
A minimum of 2 years of relevant experience

Competencies
Solutions Requirements Planning and Articulation - Developing

Business Solutions Testing and Quality Control - Proficient

Collaboration and Communication - Developing

Professionalism - Developing

Project Management - Developing

IT Compliance - Proficient

Results Oriented - Developing

IT Change Management - Developing

Customer Focus - Developing

Enablement of Change and Innovation - Developing