Senior Security Consultant

شرح موقعیت

Role: Senior Security Consultant Experience: 7–9+ Years Location: Muscat, Oman Work Mode: Full-time, Onsite Contract Duration: Initial 1 Year (Extendable) Budget: 1500 OMR / Month Notice Period: Immediate to 15 Days Preferred Relocation: Must be willing to relocate to Muscat Communication: Excellent communication skills required Qualification: Graduate Certifications: OSCP / OSEP / OSWE / CREST / CISSP / CISM / CCSP / CCSK / GWAPT / GPEN / CKS preferred We are looking for an experienced Senior Security Consultant to conduct penetration testing and security assessments across web applications, mobile applications, APIs, infrastructure, networks, containers, and Kubernetes environments. The ideal candidate should have hands-on expertise in identifying and validating security vulnerabilities, assessing security configurations, conducting threat modelling, recommending remediation measures, and validating corrective actions. Experience in banking, digital banking, mobile banking, payment systems, and financial services security is essential. The candidate will also be responsible for assessing Istio service mesh security, reviewing infrastructure and network configurations, coordinating penetration-testing vendors, conducting security tool proof-of-concept (POC) activities, and supporting compliance with banking security standards and regulatory requirements. Roles and Responsibilities Perform web, mobile, API, network, container, and Kubernetes penetration testing. Conduct Istio service mesh security assessments, including authentication, authorisation, mTLS, ingress/egress gateways, and service-to-service security. Review operating systems, databases, firewalls, network devices, and infrastructure configurations to identify security weaknesses. Assess security architecture, configurations, vulnerabilities, and associated risks. Conduct threat modelling, security assessments, and risk assessment workshops. Coordinate internal and external penetration-testing vendors, including test planning, access coordination, findings validation, remediation tracking, and retesting. Support security tool proof-of-concept (POC) activities and evaluate tool effectiveness. Prepare detailed technical assessment reports, executive summaries, risk ratings, and remediation recommendations. Collaborate with application development, infrastructure, cloud, and Information Security teams. Track remediation activities and validate the closure of identified security findings. Assess vulnerabilities in banking applications, payment platforms, digital banking systems, and related business workflows. Support compliance with banking security standards, payment security requirements, and applicable regulatory requirements. Candidate Requirements 7–9+ years of relevant experience in cybersecurity, penetration testing, and security assessments. Proven experience in Banking and Financial Services (BFSI), digital banking, mobile banking, and payment systems. Exposure to SWIFT, RTGS, PCI DSS, API security assessments, and regulatory compliance reviews. Hands-on experience assessing banking applications, payment platforms, digital banking systems, and business logic vulnerabilities. Experience in internal and external penetration testing, security reporting, risk workshops, and POC activities. Strong practical knowledge of web, mobile, API, network, container, and Kubernetes security testing. Experience with Istio service mesh security assessments. Relevant industry certifications are highly preferred. Graduate qualification. Willingness to work full-time onsite in Muscat, Oman. Must be willing to relocate to Muscat. Immediate to 15 days' notice period preferred. Excellent communication skills are mandatory. Contract duration is initially one year, with the possibility of extension. Primary Skills – Must Have Web Application Penetration Testing Mobile Application Security Testing – Android and iOS API and Microservices Security OWASP Top 10 and Common Application Vulnerabilities Container and Kubernetes Penetration Testing Istio Service Mesh Security Network Penetration Testing Infrastructure and Configuration Security Reviews Threat Modelling and Security Risk Assessment Vulnerability Validation and Remediation Penetration-Test Vendor Coordination Security Assessment Reporting and POC Execution Banking, Digital Banking, and Payment Systems Security Preferred Certifications OSCP – Offensive Security Certified Professional OSEP – Offensive Security Experienced Penetration Tester OSWE – Offensive Security Web Expert CREST – Relevant penetration-testing certifications CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager CCSP – Certified Cloud Security Professional CCSK – Certificate of Cloud Security Knowledge GWAPT – GIAC Web Application Penetration Tester GPEN – GIAC Penetration Tester CKS – Certified Kubernetes Security Specialist Equivalent relevant industry certifications Company Bachelor accommodation, airfare, and visa sponsored by the company. Important: Candidates must be willing to relocate to Muscat and work full-time onsite. Immediate to 15 days' notice period is preferred. Hands-on penetration-testing expertise and relevant banking or payment-security experience are key screening priorities.