{bc}
linkedin

Red Team Engineer

Kingston Stanley
Dubai, UAE
fulltime
Mid-Senior
Today
engineeringdesignproject managementmaintenancequality controltechnical
Free

Job Fit Check

Base Career helps you apply smarter for this job.

?%
Ready to Scan

Key skills for this role

engineeringdesignproject management
Smart Apply

Full Job Posting

Responsibilities

  • Conduct network, web application, infrastructure, and cloud penetration testing engagements for enterprise clients.
  • Execute adversary emulation and red team operations in alignment with industry-recognized methodologies and frameworks, including MITRE ATT&CK and PTES.
  • Perform comprehensive vulnerability assessments and deliver high-quality, client-facing reports in both Arabic and English.
  • Identify, validate, exploit, and document security vulnerabilities across cloud, on-premises, and hybrid environments.
  • Develop, customize, and maintain tools, scripts, and payloads to support offensive security engagements and improve operational effectiveness.
  • Support the AttackForge PTaaS platform, including engagement scoping, scheduling, findings management, and client coordination.
  • Present technical findings, risk assessments, and remediation recommendations to both technical and executive-level stakeholders.
  • Maintain awareness of emerging cyber threats, attack techniques, threat actor TTPs, and newly disclosed vulnerabilities impacting GCC organizations.
  • Collaborate closely with the Defence and Detect teams to support threat intelligence initiatives, detection engineering, and security control validation.

Requirements

  • Strong understanding of offensive security principles, including reconnaissance, exploitation, post-exploitation activities, lateral movement, privilege escalation, and data exfiltration techniques.
  • Hands-on experience with industry-standard offensive security tools such as Burp Suite, Metasploit, Nmap, Nessus, Cobalt Strike, or equivalent open-source frameworks.
  • Proficiency in at least one scripting or automation language, including Python, Bash, or PowerShell.
  • Practical knowledge of Active Directory attack methodologies, including Kerberoasting, Pass-the-Hash, BloodHound analysis, and related privilege escalation techniques.
  • Solid understanding of the OWASP Top 10 and common web application security vulnerabilities and attack vectors.
  • Exposure to cloud security assessments and offensive testing within AWS, Azure, or GCP environments is advantageous.
  • 2–4 years of hands-on experience in offensive security, gained through consultancy, internal red team operations, penetration testing, or relevant internships.
  • Native or professional-level proficiency in Arabic, with the ability to conduct client communications and produce technical documentation in Arabic.
  • Strong written English skills with the ability to produce clear, concise, and professional technical reports.
  • Proven ability to work independently, manage competing priorities, and deliver multiple engagements simultaneously.
  • Demonstrates the highest levels of professionalism, integrity, and adherence to ethical hacking standards, including strict compliance with rules of engagement.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Kingston Stanley