Description

The penetration testing team leader is responsible for leading ZainTECH’s licensed penetration testing capability within the cybersecurity advisory services practice. The role oversees the delivery of offensive security engagements across enterprise, government, and critical infrastructure customers throughout the MENA region, ensuring all testing activities are performed in accordance with industry best practices, recognized testing methodologies, and NCSC Jordan licensing requirements. The role combines hands-on technical leadership with team management, customer engagement, and service governance responsibilities.

Also responsible for managing penetration testing engagements, developing offensive security capabilities, assuring quality of deliverables, and strengthening customer security postures through actionable remediation guidance.

Responsibilities

Penetration testing engagement leadership
Lead and manage penetration testing engagements across infrastructure, web, wireless, and applications to a recognized methodology.
Define engagement scope, objectives, testing methodology, and rules of engagement.
Ensure all testing activities are conducted safely and within approved customer authorizations.
Manage engagement timelines, resources, and delivery quality.
Act as the primary technical lead throughout the penetration testing lifecycle.

Offensive security delivery
Perform advanced penetration testing activities using both manual and automated testing techniques.
Identify, validate, and demonstrate security vulnerabilities and attack paths.
Assess exploitability, business impact, and risk exposure associated with identified findings.
Conduct vulnerability assessments, penetration testing, security validation exercises, configuration reviews, and red team-style activities where applicable.
Support retesting activities following remediation efforts.

Quality assurance & technical review
Review and validate penetration testing findings prior to customer delivery.
Ensure reports are technically accurate, risk-rated appropriately, actionable and business-focused, and aligned with industry standards.
Review attack chains and exploitation methodologies to ensure consistency and quality.
Maintain testing methodologies aligned with OWASP Testing Guide, PTES, OSSTMM, NIST guidance, and industry best practices.

Customer engagement & advisory services
Present technical findings and executive summaries to customer stakeholders.
Conduct remediation workshops and technical review sessions.
Support customers in understanding security risks, threat exposure, and recommended remediation activities.
Provide strategic guidance on improving overall security posture.
Support presales activities, customer workshops, and cybersecurity assessments where required.

Team leadership & capability development
Lead, mentor, and develop penetration testers within the cybersecurity practice.
Conduct technical coaching, skills development programs, knowledge-sharing sessions, and offensive security training initiatives.
Support recruitment, onboarding, and capability development activities.
Ensure team certifications remain current and aligned with NCSC requirements.
Drive continuous improvement across offensive security methodologies and tooling.

Governance, compliance & service development
Ensure compliance with NCSC Jordan licensing requirements, internal security policies, customer contractual obligations, and regulatory requirements.
Enforce secure testing practices, confidentiality requirements, and evidence handling procedures.
Support service development initiatives to expand ZainTECH’s offensive security capabilities.
Maintain operational documentation, testing standards, and quality assurance processes.
Coordinate reporting and compliance activities required by NCSC and other regulatory stakeholders.

Our culture & code of conduct

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.

Requirements

• Bachelor's degree (minimum) in information technology or a related field.
• Minimum 5 years experience in cybersecurity, including at least 5 completed penetration testing projects.
• At least one valid NCSC-approved penetration testing certification like CPENT, CEPT, OSCE, LPT, CPT, GPEN, or another internationally recognized, equivalent certification in the same field that is approved by the NCSC.
• Deep, hands-on offensive skills across network, web, wireless, and application testing, and command of recognized methodologies (OWASP, PTES, OSSTMM).
• Leadership: proven ability to lead a testing team and present to client executives.
• Advanced degree in cybersecurity or a related discipline is preferable.
• Advanced credentials such as OSCE, CPENT, LPT, or GPEN are preferable.
• Experience in red teaming or an MSSP/consultancy offensive practice is preferable.