Penetration Tester Resume Example
Kill-chain layout: recon-exploit-report header tags, engagement metrics and a findings table for penetration testers and red-team consultants.
Use this example Template: Penetration Tester
Faris Al Otaibi
Senior Penetration Tester — Web, Cloud & Red Team (OSCP, OSWE)
faris.alotaibi@example.com+966 55 555 0372Riyadh, Saudi Arabialinkedin.com/in/farisalotaibi-sec
11Years offensive
120+Engagements
14CVEs
11/13Domain admin
Summary
Offensive security consultant with 11 years testing banks, government and telecom clients across the GCC. I scope and run web, API, mobile, Active Directory and cloud engagements, chain findings into realistic attack paths, and write reports that developers can fix from and executives can act on. I have led 120+ engagements, reported 14 CVEs and built the team's NCA ECC test methodology.
Experience
Senior Penetration Tester, Red Team
SITE (Saudi Information Technology Company) · Riyadh
Feb 2021 – Present
120+Engagements led
14CVEs reported
9 daysMean time to fix criticals
- Lead web, API and mobile tests for banks and government entities, from scoping and rules of engagement to retest
- Ran assumed-breach red-team exercises on Active Directory and Azure AD, reaching domain admin in 11 of 13 tests and mapping each path to MITRE ATT&CK
- Built the NCA ECC and SAMA CSF test methodology and report templates; critical-fix time fell from 30 to 9 days
- Mentor 4 junior testers; run monthly internal CTFs and secure-code clinics with client development teams
Penetration Tester
Help AG · Dubai
Jul 2017 – Jan 2021
60+Client tests
- Tested internet-facing estates, internal networks and wireless for energy, retail and aviation clients in the UAE
- Found a pre-auth RCE in a widely used HR portal; coordinated disclosure and vendor fix within 21 days
- Automated recon and reporting with Python and Burp extensions, saving 6 hours per web test
Security Operations Analyst
STC · Riyadh
Aug 2015 – Jun 2017
- Triaged SIEM alerts and supported incident response for a national telecom network; wrote 30 detection rules
Recent engagements
| Scope | Critical / high | Duration |
|---|---|---|
| Retail bank — mobile & API | 2 / 7 | 3 weeks |
| Ministry — Active Directory | 3 / 5 | 2 weeks |
| Telecom — Azure tenant | 1 / 4 | 2 weeks |
| Fintech — web & payments | 1 / 6 | 10 days |
| Utility — OT perimeter | 0 / 3 | 1 week |
Summary example
Offensive security consultant with [N] years testing banks, government and telecom clients across the GCC. I scope and run web, API, mobile, Active Directory and cloud engagements, chain findings into realistic attack paths, and write reports that developers can fix from and executives can act on. I have led [N]+ engagements, reported [N] CVEs and built the team's NCA ECC test methodology.
Example bullet points for a Penetration Tester
- Lead web, API and mobile tests for banks and government entities, from scoping and rules of engagement to retest
- Ran assumed-breach red-team exercises on Active Directory and Azure AD, reaching domain admin in [N] of [N] tests and mapping each path to MITRE ATT&CK
- Built the NCA ECC and SAMA CSF test methodology and report templates; critical-fix time fell from [N] to [N] days
- Mentor [N] junior testers; run monthly internal CTFs and secure-code clinics with client development teams
- Tested internet-facing estates, internal networks and wireless for energy, retail and aviation clients in the UAE
- Found a pre-auth RCE in a widely used HR portal; coordinated disclosure and vendor fix within [N] days
- Automated recon and reporting with Python and Burp extensions, saving [N] hours per web test
- Triaged SIEM alerts and supported incident response for a national telecom network; wrote [N] detection rules
Replace the [brackets] with your own numbers and facts. Never claim results you didn't achieve.
Skills to include
- Web & API testing (OWASP)
- Active Directory / Azure AD
- Cloud (AWS, Azure)
- Report writing
- Burp Suite Pro
- BloodHound
- Cobalt Strike
- Nmap
- Python
Tips for a Penetration Tester resume
- Put the hard requirements recruiters screen for in the top third: Web & API testing (OWASP), Active Directory / Azure AD, Cloud (AWS, Azure).
- List current credentials with the issuing body, e.g. OSCP — Offensive Security Certified Professional, OSWE — Web Expert.
- Give every recent role at least one measured result — for example engagements led.
- Match the job title in your headline to the posting where it is honest to do so.
- Run the built-in resume checker and paste the job description into the keyword match before you download.
Related: How to write a resume · Action verbs · All templates