Offensive Security Engineer: PenTesting & Red Team

PureCS; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

PureCS is seeking a Specialist - Offensive Security to strengthen our cybersecurity posture across national health platforms. You will conduct penetration testing, adversarial simulations, vulnerability exploitation, and advanced security assessments across PureCS and PureNet systems.

You will collaborate with DevSecOps, Cloud, Architecture, and Product teams to identify weaknesses, validate controls, and ensure our platforms meet the highest security standards while communicating risk to

Qualifications

• Minimum 3 years of hands‑on Offensive Security / Penetration Testing (network + application).
• Minimum 6 years total IT experience.
• Strong experience with AD attack paths, privilege escalation, lateral movement, and exploitation.
• Working knowledge of manual testing for web apps, mobile apps (iOS/Android), APIs, and thick‑client apps.
• Solid understanding of OS internals (Windows/Linux), network protocols, services, and misconfigurations.
• Strong understanding of authentication/authorization techniques and security issues across network, web, mobile, and API layers.
• Proficiency with offensive tooling: Burp Suite, Nmap, Metasploit, BloodHound, Impacket, C2 frameworks.
• Comfortable with scripting (Python, PowerShell, Bash) and adapting public exploits.
• Knowledge of cloud‑native app architecture and cloud security.

Responsibilities

• Execute periodic penetration testing across network, infrastructure, cloud, and application layers (blackbox, greybox, whitebox).
• Perform internal/external network penetration testing including perimeter, internal segments, AD/EntraID, servers, endpoints, and hyperscaler cloud environments.
• Conduct web, mobile, thick‑client, and API penetration testing with timely remediation follow‑ups.
• Carry out controlled post‑exploitation, privilege escalation, and lateral movement to demonstrate business impact.
• Collaborate with development teams to test incremental changes during sprints.
• Review SAST/DAST/SCA outputs, prioritize issues, and coordinate fixes.
• Drive integration and usage of SAST/SCA tooling within DevOps pipelines.
• Prepare secure coding practice documents tailored to organizational frameworks.
• Map engagements to OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
• Validate automation outputs, eliminate false positives, confirm exploitability.
• Retest remediated findings and maintain tracking of closure and coverage.
• Support red and purple team exercises, validate detection and response capabilities with blue team.
• Contribute to enhancements in offensive security tooling, automation, and processes.
• Develop scripts and tooling to automate standardized testing use cases.
• Improve program agility through tooling upgrades and process refinement.

Skills

Penetration testing

Adversarial thinking

Scripting

Communication

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

C2 frameworks

Job description

PureCS is seeking a Specialist - Offensive Security to strengthen our cybersecurity posture across national health platforms. You will conduct penetration testing, adversarial simulations, vulnerability exploitation, and advanced security assessments across PureCS and PureNet systems.

You will collaborate with DevSecOps, Cloud, Architecture, and Product teams to identify weaknesses, validate controls, and ensure our platforms meet the highest security standards while communicating risk to