Information Security Analyst

Raqmiyat; Abu Dhabi; On-site; AED 167,400 - 279,000; Full time

Job summary

A leading IT consulting firm in Abu Dhabi is seeking a skilled professional to conduct penetration testing and red teaming exercises, developing bespoke tools for vulnerability assessments. The role involves analyzing findings, providing security recommendations, and participating in incident response teams. Ideal candidates should have experience with security tools and methodologies. This position offers a unique opportunity to engage with advanced threat modeling and crisis management.

Qualifications

• Experience with comprehensive penetration testing on various systems.
• Knowledge of red teaming exercises and vulnerability analysis.
• Proficient in developing automation scripts for testing processes.

Responsibilities

• Conduct penetration testing and red teaming exercises to identify vulnerabilities.
• Analyze findings and provide remediation recommendations.
• Participate in incident response and crisis management efforts.

Skills

Penetration testing

Red teaming

Automation scripting

Threat modeling

Incident response

Security research

Tools

Security testing tools

Job description

Abu Dhabi, United Arab Emirates | Posted on 08/19/2025

Raqmiyat is a UAE-based IT and digital transformation company specializing in consulting, staffing, and enterprise technology solutions. We empower banking, government, and enterprise clients across the Middle East to achieve their digital objectives.

Job Description

Key Responsibilities

• Conduct comprehensive penetration testing and red teaming exercises on systems, networks, applications, and mobile to identify vulnerabilities and potential entry points for attackers.
• Develop and execute custom tools and scripts to automate testing and exploitation processes.
• Analyze and report on findings, providing detailed explanations of vulnerabilities and recommended remediation steps.
• Simulate advanced persistent threats (APTs) to test the resilience of security controls and incident response capabilities.
• ASM: Continuously discover and catalog all assets, including hardware, software, and network components.
• ASM: Monitor the attack surface for changes and potential vulnerabilities, using automated tools and manual assessments.

Threat Modeling and Risk Assessment

• Conduct threat modeling and risk assessments to identify potential attack vectors and vulnerabilities.
• Develop and maintain a comprehensive understanding of our systems, networks, and applications to identify potential vulnerabilities.
• Provide recommendations for remediation and mitigation strategies.

Incident Response and Crisis Management

• Participate in security incident response and crisis management efforts as needed.
• Collaborate with incident response teams to contain and remediate security incidents.
• Provide technical expertise and guidance during incident response efforts.

Security Research and Development

• Stay up-to-date with the latest security threats and trends, and adapt testing methodologies accordingly.
• Develop and maintain a comprehensive knowledge of industry-leading security tools and technologies.
• Participate in security research and development efforts to identify and develop new testing techniques and methodologies.