Senior Adversary Emulation Specialist

MTC - Global Car Exporters; Abu Dhabi; Remote; AED 300,000 - 520,000; Full time

Benefits offered by this job

100% remote working arrangement from a

Competitive compensation based on exp.

Opportunities to contribute to cyberse

Professional development in adversary

Collaboration with international teams

Job summary

MTC - Global Car Exporters is seeking a Senior Adversary Emulation Specialist to design and run controlled emulation exercises, mapping tactics to the MITRE ATT&CK framework, and assess defensive coverage across endpoints, networks, cloud, and identities. This is a fully remote role with collaboration across red/blue teams and threat intelligence groups.

You will develop realistic attack scenarios, validate detection rules, and provide remediation guidance while mentoring junior staff and

Qualifications

• Bachelor's or master's degree in a cybersecurity-related field.
• Significant experience in adversary emulation, red teaming, penetration testing, threat intelligence, or security validation.
• Strong knowledge of MITRE ATT&CK and threat-informed defense methodologies.
• Experience developing adversary emulation plans and controlled attack simulations.

Responsibilities

• Design and lead controlled adversary emulation exercises based on threat intelligence.
• Research threats and develop realistic simulation scenarios.
• Map adversary tactics to MITRE ATT&CK framework.
• Develop emulation plans across endpoints, networks, cloud, identity, and apps.
• Conduct authorized simulations to evaluate detection and response capabilities.
• Assess monitoring coverage and incident escalation procedures.
• Collaborate to validate detection rules and identify gaps.
• Evaluate SIEM/EDR/XDR and network defense capabilities.
• Develop testing procedures and reusable simulation scripts.
• Analyze telemetry and logs to verify detection of simulated activity.
• Identify weaknesses in preventive controls and incident response workflows.
• Coordinate purple team activities to improve offensive/defensive collaboration.
• Provide remediation recommendations and follow-up validation.

Skills

Adversary emulation

Red teaming

Penetration testing

Threat intelligence

Security validation

Scripting

MITRE ATT&CK knowledge

Security architecture understanding

SIEM/EDR/XDR experience

Detection & monitoring

Incident response insight

Technical writing & stakeholder comms

Remote work independence

Education

Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or related field

Tools

MITRE CALDERA

Atomic Red Team

Infection Monkey

Job description

Job Title: Senior Adversary Emulation Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Adversary Emulation Specialist to evaluate and strengthen organizational cybersecurity defenses by simulating the tactics, techniques, and procedures (TTPs) of sophisticated cyber adversaries. The role focuses on developing controlled attack scenarios based on real-world threat intelligence, assessing defensive capabilities, identifying security gaps, and improving detection and response effectiveness.

The successful candidate will work closely with red teams, blue teams, threat intelligence analysts, and security engineering professionals to validate security controls and enhance organizational resilience. All activities will be conducted remotely within approved environments and explicitly authorized testing scopes.

Key Responsibilities

• Design and lead controlled adversary emulation exercises based on relevant cyber threat intelligence.
• Research advanced persistent threats, cybercriminal groups, and emerging attack techniques to develop realistic simulation scenarios.
• Map adversary tactics, techniques, and procedures to the MITRE ATT&CK framework.
• Develop emulation plans that assess security controls across endpoints, networks, cloud environments, identity systems, and applications.
• Conduct authorized simulations of attack behaviors to evaluate organizational detection and response capabilities.
• Assess defensive visibility, security monitoring coverage, alert generation, and incident escalation procedures.
• Collaborate with security operations teams to validate detection rules and identify monitoring gaps.
• Evaluate endpoint detection and response, SIEM, XDR, identity security, and network defense capabilities.
• Develop controlled testing procedures and reusable simulation scripts within approved environments.
• Analyze exercise telemetry, security logs, and investigation records to determine whether simulated activities were detected and handled appropriately.
• Identify weaknesses in preventive controls, defensive configurations, and incident response workflows.
• Coordinate purple team exercises to improve collaboration between offensive and defensive security functions.
• Develop remediation recommendations based on observed control weaknesses and measurable testing outcomes.
• Conduct follow-up validation to confirm that security improvements effectively address identified gaps.
• Maintain detailed documentation of exercise objectives, authorization, scope, execution results, and technical findings.
• Prepare executive reports and technical assessments outlining adversary emulation results and organizational risk exposure.
• Mentor junior security professionals and promote continuous improvement in adversary emulation practices.

Qualifications and Experience

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related field.
• Significant professional experience in adversary emulation, red teaming, penetration testing, threat intelligence, or security validation.
• Strong understanding of advanced cyberattack methodologies and real-world adversary behavior.
• Practical knowledge of the MITRE ATT&CK framework and threat-informed defense methodologies.
• Experience developing adversary emulation plans and controlled attack simulation scenarios.
• Familiarity with security testing frameworks and tools such as MITRE CALDERA, Atomic Red Team, Infection Monkey, or comparable platforms.
• Understanding of endpoint, network, cloud, identity, and application security architectures.
• Experience with SIEM, EDR, XDR, threat detection, and security monitoring technologies.
• Knowledge of common attack techniques involving credential access, lateral movement, persistence, privilege escalation, and command-and-control behavior.
• Ability to analyze security telemetry, event logs, and detection outcomes.
• Familiarity with scripting and automation using Python, PowerShell, Bash, or similar languages.
• Understanding of incident response, threat hunting, and security control assessment.
• Strong analytical, investigative, and technical problem-solving capabilities.
• Excellent technical writing and stakeholder communication skills.
• Ability to manage sensitive security projects independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation based on experience and technical expertise.
• Opportunities to contribute to advanced cybersecurity and threat-informed defense initiatives.
• Professional development in adversary simulation, threat intelligence, and security validation.
• Collaboration with international teams across cybersecurity, engineering, and security operations.