You will be a Senior Consultant within the Cyber Defense and Response team, supporting the delivery of red team operations, penetration testing, adversarial emulations, and SOC maturity assessment projects for our clients across various sectors. The ideal candidate will have hands-on experience simulating real-world attacks across enterprise environments and executing various types of assessments including web, mobile, API, and network VAPT. This is a remote opportunity for candidates based in Egypt, with occasional on-site travel to UAE/KSA on a need basis.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Executing penetration tests of web applications, mobile applications, APIs, and network infrastructure.
- Participating in red team and social engineering engagements, including phishing and physical intrusion scenarios under supervision or defined playbooks.
- Setting up, maintaining, and operating C2 infrastructure using tools such as Cobalt Strike, Sliver, or similar frameworks.
- Assisting in adversary emulation exercises based on frameworks like MITRE ATT&CK.
- Preparing detailed, risk-based reports and presenting technical findings to internal and client teams.
- Developing and maintaining internal tools, scripts, and documentation for offensive testing.
- Collaborating with other teams, including blue/purple teams, to improve client defenses.
- Staying up-to-date with the latest offensive security techniques, vulnerabilities, and tools.
- Supporting with business development activities including proposal development and budgeting.
- Developing constructive client relationships, both inside and outside of the company.
Requirements
- At least 5+ years of experience in cyber security, with a focus on offensive security and VAPT.
- Strong understanding and experience with common penetration testing methodologies (e.g., OWASP, PTES, NIST).
- Practical experience in performing Web, Mobile, API, LLM, cloud, and network-based VAPT assessments.
- Experience in setting up, using, and maintaining C2 platforms (e.g., Cobalt Strike, Mythic, etc.).
- Proven ability to analyze problems, identify core issues, and recommend appropriate solutions.
Qualifications and Skills
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- OSCP certification is mandatory. In addition, candidates must hold at least one of the following: OSEP, OSWE, CCT INF, and CCT APP.
- Proficiency with industry-standard tools such as Burp Suite, Nmap, Metasploit, BloodHound, etc.
- Excellent presentation and communication skills (both written and oral).
- Commitment to continuous learning and professional development in offensive and defensive security.
