Consultant

Protiviti Middle East Member Firm; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

Protiviti in Dubai seeks experienced information security consultants to join our S&P team. You will execute and manage diverse client engagements, focusing on security posture assessments across systems, platforms, and processes to protect confidentiality, integrity, and availability in line with business and regulatory objectives.

The role requires hands-on security testing, vulnerability assessments, and the ability to communicate findings clearly to business audiences, while mentoring junior

Qualifications

• Bachelor’s Degree in Computer Science or substantial equivalent.
• 2–6 years of professional information security experience focusing on technical assessments.
• Strong knowledge of pen testing concepts and best practices.
• GIAC GPEN, GWAPT, CREST or OSCE preferred.

Responsibilities

• Provide innovation within the Vulnerability and Penetration Testing (VAPT) program for process and technology.
• Serve as a SME for the Attack & Pen function.
• Perform authorized attack surface reviews, penetration tests, and red team assessments.
• Provide assessment reports with clear, practical recommendations based on risk management principles.
• Update standards and procedures to improve security posture.
• Assess policies, standards, and procedures relative to security best practices.
• Contribute to security information repositories and business development.
• Mentor junior team members and provide consultation to peers.

Skills

Penetration testing

Vulnerability assessment

Information security

Risk management

English communication

Mentoring

Education

Bachelor's degree in Computer Science

Tools

Nessus

AppScan

Burp Suite

Nipper

Exploit Pack

Wireshark

Kali Linux

Metasploit

Job description

Role Summary

We are looking for experienced consultants to join our S&P team at Protiviti. The role will primarily involve executing and managing diverse client engagements. While the role is based in GCC resources may travel across various client locations in the Middle East, etc.

The successful applicant will be responsible for assessing the security posture of client systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems in accordance with the client's business objectives, regulatory requirements, and strategic goals.

Responsibilities

• Provide innovation within the context of the Vulnerability and Penetration Testing (VAPT) program in relation to both process and technology.
• Serve as a Subject Matter Expert (SME) for the Attack & Pen function.
• Perform authorized attack surface reviews, penetration tests, and red team assessments against specific targets.
• Provide assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based on sound risk management principles.
• Update standards and procedures designed to continually improve security posture
• Assess the sufficiency of policies, standards, and procedures relative to security best practices.
• Contribute to the security-related information repositories and other business development endeavors.
• Mentor junior members of the team and provide constructive consultation to other peer groups.

Background Requirements

• Computer Science Bachelor’s Degree or substantial equivalent.
• 2 to 6 years of professional experience in information security with a focus on technical assessments.
• Commanding knowledge of pen testing concepts and best practices.
• Extensive experience with common Pentesting tools such as Nessus, Appscan, Burp Suite, Nipper, Exploit Pack etc.
• Proficiency with other common attack tools and frameworks such as Wireshark, Kali, and Metasploit, etc.
• Ability to validate the presence of identified vulnerabilities with accuracy.
• Mastery of common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser plugins.
• In-depth understanding of OWASP, CVE general security controls, and other foundational topics such as the latest application and operating system exploits.
• Knowledge of common scripting and programming languages like python, shell script etc.
• GIAC GPEN, GWAPT, CREST or OSCE preferred.

Personal Skills:

• Ability to maintain critical thinking and composure under pressure.
• Strong written and oral communication skills in English. Ability to convey complex concepts to business audience.
• Ability to be productive and maintain focus with minimal supervision.
• Understands VAPT in the context of risk management and organizational priorities.