Cyber Security Engineer (Red Team)

MHMarkets; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading fintech company is hiring a Red Team Cybersecurity Specialist to enhance its offensive security operations in Dubai. The role involves simulating threats, conducting penetration tests, and collaborating with teams to improve defenses. Candidates should have 4+ years of experience in red teaming and hold a relevant bachelor's degree, with certifications like OSCP preferred.

Qualifications

• 4+ years of hands-on offensive security/red team experience.
• Deep understanding of AD exploitation, lateral movement, and privilege escalation.
• Familiar with frameworks like MITRE ATT&CK, NIST, and OWASP.

Responsibilities

• Design and execute red team engagements simulating real-world threat actors.
• Conduct full-scope internal and external penetration tests.
• Perform social engineering assessments.

Skills

Metasploit

Cobalt Strike

Burp Suite

Nmap

Python

Bash

PowerShell

AD exploitation

Privilege escalation

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Security

Job description

We’re hiring a Red Team Cybersecurity Specialist to lead our offensive security operations and proactively identify weaknesses before real attackers do. You’ll simulate advanced persistent threats (APTs), exploit vulnerabilities, and think like an adversary to rigorously test our systems, people, and infrastructure. This is a high-impact role for someone who thrives in red teaming, ethical hacking, and penetration testing, and wants to build a best-in-class offensive security function in a fast-moving fintech environment.

What You’ll Do

• Design and execute red team engagements simulating real-world threat actors.
• Conduct full-scope internal and external penetration tests.
• Perform social engineering assessments (phishing, vishing, physical intrusion).
• Identify vulnerabilities, develop custom exploits, and escalate privileges.
• Map attack surfaces using tools like BloodHound, SharpHound, and AD recon.
• Conduct malware development, payload obfuscation, and bypass EDR/XDR tools.
• Utilize C2 frameworks like Cobalt Strike, Sliver, Mythic, or Empire.
• Generate actionable reports for blue team with clear risk analysis and remediation.
• Collaborate with threat intel and blue team to enhance detection and response.
• Stay ahead of adversary TTPs using MITRE ATT&CK and emerging threat data.

What You Bring

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• 4+ years of hands-on offensive security/red team experience.
• Strong command of Metasploit, Cobalt Strike, Burp Suite, Nmap, and manual testing.
• Experience with custom script development in Python, Bash, or PowerShell.
• Deep understanding of AD exploitation, lateral movement, and privilege escalation.
• Familiar with frameworks like MITRE ATT&CK, NIST, and OWASP.
• Ability to write detailed reports and communicate technical findings to non-technical stakeholders.

Preferred Certifications

• OSCP (required)
• CRTP, OSCE, GPEN, or OSEP
• CEH or other ethical hacking certifications (nice to have)

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]

28th Floor, One by Omniyat Building, Business Bay Dubai | U.A.E., PO Box - 124805, Dubai, United Arab Emirates (UAE)