Senior Security Consultant

About the role

We are seeking an experienced Senior Security Consultant to lead penetration testing and security assessments across web, mobile, API, infrastructure, container, and Kubernetes environments. The role focuses on banking and financial services security, including digital and mobile banking, payment systems, and Istio service mesh.

Key responsibilities

• Perform penetration testing on web, mobile, API, network, container, and Kubernetes platforms.
• Assess Istio service mesh security, covering authentication, authorization, mTLS, and gateway configurations.
• Review operating systems, databases, firewalls, and network devices for security weaknesses.
• Conduct threat modelling, security assessments, and risk‑assessment workshops.
• Coordinate internal and external penetration‑testing vendors, manage test planning, findings validation, remediation tracking and retesting.
• Support security tool proof‑of‑concept activities and evaluate tool effectiveness.
• Prepare detailed technical reports, executive summaries, risk ratings and remediation recommendations.
• Collaborate with development, infrastructure, cloud and information security teams to track and validate remediation actions.
• Ensure compliance with banking security standards, payment security requirements and relevant regulations.

Required profile

• 7–9+ years of experience in cybersecurity, penetration testing and security assessments.
• Proven experience in banking, digital banking, mobile banking or payment systems, with exposure to SWIFT, RTGS and PCI DSS.
• Graduate qualification; relevant certifications (OSCP, OSWE, CISSP, etc.) highly preferred.
• Willingness to relocate to Muscat and work full‑time onsite with immediate to 15‑day notice period.

Required skills

• Web Application Penetration Testing
• Mobile Application Security Testing (Android & iOS)
• API and Microservices Security
• Container and Kubernetes Security Testing
• Istio Service Mesh Security Assessment
• Network Penetration Testing
• Infrastructure and Configuration Security Reviews
• Threat Modelling and Security Risk Assessment

What we offer

• Bachelor accommodation
• Airfare and visa sponsorship by the company