About the Job: The mission of the team is to scope, plan, and execute offensive security assessments for the company Cloud and Mandiant customers. Mandiant's Red Team delivers offensive security engagements. This may involve delivering a Red Team for a large enterprise, breaching the external perimeter through application compromise, preparing command and control infrastructure, developing social engineering campaigns, executing phishing campaigns, conducting privilege escalation, lateral movement within customer networks, and exfiltrating data—all while avoiding detection from customer security operations teams. In this role, you will be responsible for providing cybersecurity consulting services and support to our clients, assessing and advising clients on both technical and process-based controls for various environments.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Minimum Qualifications:
- Bachelor's degree in cybersecurity, focusing on offensive security, or equivalent practical experience.
- 5 years of experience in three of the following areas: application security, red team assessments, endpoint detection and response evasion, exploit development, cloud, social engineering, scripting, or tool development.
- Experience in delivering reports and presentations to both technical and executive audiences.
- Knowledge of operating system security across various operating systems or Linux.
Preferred Qualifications:
- Certifications related to offensive security (e.g., OSCE, OSEP, OSEE, OSCP, CCSAS, CCT INF, or relevant SANS courses).
- Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, application development, technical incident response processes, source code review, or reverse engineering.
- Experience in finding 0-day vulnerabilities in web or mobile applications.
- Proficiency in creating security tools and understanding programming languages (e.g., Python, C#, C/C++, Rust, Nim).
- Experience in performing application source code reviews and in payload development, lateral movement, privilege escalation, and EDR evasion.
Responsibilities:
- Perform Red and Purple Team assessments, including adversarial emulation of cyber attacks against customer organizations, and other technical assessments.
- Expand the team’s capabilities through tool creation, research on offensive techniques, and knowledge sharing.
- Develop comprehensive reports and presentations for both technical and executive audiences.
- Act as a trusted advisor to C-level, security leaders, and other stakeholders, assisting with scoping prospective engagements, leading teams, and mentoring staff.
Location: Dubai, Dubai, United Arab Emirates
Work Conditions: On-site, Full-time
Language Requirements: Not specified.
Company Commitment: The company is an equal opportunity workplace and is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
