As a Senior Offensive Security Consultant at the company, you will be responsible for engaging with customers to understand their security needs and leading Red Team and penetration testing engagements. Your role will involve executing sophisticated Red Team operations that mimic advanced cyber threats, identifying and exploiting vulnerabilities in client environments, and providing actionable insights and recommendations for remediation.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities:
- Collaborate with clients to assess their security objectives and deliver high-quality results.
- Plan and execute realistic Red Team operations, simulating adversary tactics and techniques.
- Conduct comprehensive penetration tests on client systems, networks, and applications.
- Document testing procedures, findings, and recommendations clearly for both technical and non-technical stakeholders.
- Stay updated with industry trends, emerging threats, and advancements in offensive security methodologies.
Required Skills:
- Excellent written and verbal communication skills in English.
- Experience in developing and conducting Red Team and penetration testing engagements.
- Familiarity with common offensive toolsets and the ability to build custom tools.
- Proficient in scripting languages such as Python, Perl, PowerShell, and Ruby.
- Development experience using C, C++, .NET, Java, and Go.
- Strong understanding of Active Directory and Azure AD.
- Experience conducting vulnerability assessments, physical assessments, and social engineering campaigns.
- Knowledge of operating system internals and endpoint security controls.
Qualifications:
- Bachelor’s Degree in Computer Engineering, Computer Science, or related field, or 8-10+ years of experience in Attack and Penetration testing roles.
- Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
The company is committed to protecting people, devices, and data in a digital world that can always be trusted. With a broad and integrated approach to cybersecurity, we serve various sectors including enterprises, service providers, and government organizations globally.
