Remote Senior Red Team & Offensive Security Consultant

KPMG Middle East; United Arab Emirates; On-site; AED 250,000 - 450,000; Full time

Job summary

KPMG Middle East is seeking a Senior Consultant for its Cyber Defense and Response team. The role involves leading red team operations, web/mobile/API/network VAPT, and adversary emulation projects for clients across sectors.

You will simulate real-world attacks, use C2 frameworks, and contribute to SOC maturity assessments while collaborating with cross-functional teams. The role requires hands-on red team experience, proficiency with tools like Burp Suite, Nmap, Metasploit, and BloodHound, and

Qualifications

• 5+ years of cyber security experience focusing on offensive security and VAPT.
• Hands-on experience across web, mobile, API, and network assessments; strong in attack simulation.
• Experience with red team, phishing, and social engineering playbooks.

Responsibilities

• Execute web/mobile/API/network penetration tests.
• Participate in red team and social engineering engagements.
• Set up and operate C2 infrastructure (Cobalt Strike, Sliver, etc.).
• Assist adversary emulation using MITRE ATT&CK.
• Prepare detailed risk-based reports and present findings to teams and clients.
• Develop internal tools and scripts for offensive testing.
• Collaborate with blue/purple teams to improve client defenses.
• Support business development activities including proposals and budgeting.

Skills

Offensive security

VAPT

Penetration testing

Social engineering

C2 infrastructure

Adversary emulation

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

KPMG Middle East is seeking a Senior Consultant for its Cyber Defense and Response team. The role involves leading red team operations, web/mobile/API/network VAPT, and adversary emulation projects for clients across sectors.

You will simulate real-world attacks, use C2 frameworks, and contribute to SOC maturity assessments while collaborating with cross-functional teams. The role requires hands-on red team experience, proficiency with tools like Burp Suite, Nmap, Metasploit, and BloodHound, and