Senior Adversary Emulation Specialist

MTC - Global Car Exporters; United Arab Emirates; À distance; AED 180 000 - 300 000; Plein temps

Avantages offerts par ce poste

100% remote work

Competitive compensation

Professional development

International collaboration

Résumé du poste

MTC - Global Car Exporters is seeking a Senior Adversary Emulation Specialist to design and run controlled simulations that mirror real-world attacker behavior. You will map techniques to MITRE ATT&CK and validate defenses across endpoints, networks, cloud and identity services.

Working 100% remotely from the UAE, you will collaborate with red teams, threat intel, and security engineering to develop testing plans, analyze telemetry, and craft remediation strategies that close detection gaps.

Qualifications

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or related field.
• Significant professional experience in adversary emulation, red teaming, penetration testing, threat intelligence, or security validation.
• Strong understanding of advanced cyberattack methodologies and real-world adversary behavior.
• Practical knowledge of MITRE ATT&CK and threat-informed defense methodologies.
• Experience developing adversary emulation plans and controlled attack simulations.

Responsabilités

• Design and lead controlled adversary emulation exercises based on threat intelligence.
• Map adversary techniques to the MITRE ATT&CK framework.
• Develop emulation plans across endpoints, networks, cloud, identity, and applications.
• Conduct authorized simulations to evaluate detection and response capabilities.
• Collaborate with security operations to validate detection rules and identify gaps.
• Develop remediation recommendations and perform follow-up validation.

Connaissances

Adversary emulation

Red teaming

Penetration testing

Threat intelligence

Security validation

Scripting / automation

Formation

Bachelor's or master's in Cybersecurity / CS / IT

Outils

MITRE CALDERA

Atomic Red Team

Infection Monkey

MITRE ATT&CK framework

Description du poste

Job Title: Senior Adversary Emulation Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Adversary Emulation Specialist to evaluate and strengthen organizational cybersecurity defenses by simulating the tactics, techniques, and procedures (TTPs) of sophisticated cyber adversaries. The role focuses on developing controlled attack scenarios based on real-world threat intelligence, assessing defensive capabilities, identifying security gaps, and improving detection and response effectiveness.

The successful candidate will work closely with red teams, blue teams, threat intelligence analysts, and security engineering professionals to validate security controls and enhance organizational resilience. All activities will be conducted remotely within approved environments and explicitly authorized testing scopes.

Key Responsibilities

• Design and lead controlled adversary emulation exercises based on relevant cyber threat intelligence.
• Research advanced persistent threats, cybercriminal groups, and emerging attack techniques to develop realistic simulation scenarios.
• Map adversary tactics, techniques, and procedures to the MITRE ATT&CK framework.
• Develop emulation plans that assess security controls across endpoints, networks, cloud environments, identity systems, and applications.
• Conduct authorized simulations of attack behaviors to evaluate organizational detection and response capabilities.
• Assess defensive visibility, security monitoring coverage, alert generation, and incident escalation procedures.
• Collaborate with security operations teams to validate detection rules and identify monitoring gaps.
• Evaluate endpoint detection and response, SIEM, XDR, identity security, and network defense capabilities.
• Develop controlled testing procedures and reusable simulation scripts within approved environments.
• Analyze exercise telemetry, security logs, and investigation records to determine whether simulated activities were detected and handled appropriately.
• Identify weaknesses in preventive controls, defensive configurations, and incident response workflows.
• Coordinate purple team exercises to improve collaboration between offensive and defensive security functions.
• Develop remediation recommendations based on observed control weaknesses and measurable testing outcomes.
• Conduct follow-up validation to confirm that security improvements effectively address identified gaps.
• Maintain detailed documentation of exercise objectives, authorization, scope, execution results, and technical findings.
• Prepare executive reports and technical assessments outlining adversary emulation results and organizational risk exposure.
• Mentor junior security professionals and promote continuous improvement in adversary emulation practices.

Qualifications and Experience

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related field.
• Significant professional experience in adversary emulation, red teaming, penetration testing, threat intelligence, or security validation.
• Strong understanding of advanced cyberattack methodologies and real-world adversary behavior.
• Practical knowledge of the MITRE ATT&CK framework and threat-informed defense methodologies.
• Experience developing adversary emulation plans and controlled attack simulation scenarios.
• Familiarity with security testing frameworks and tools such as MITRE CALDERA, Atomic Red Team, Infection Monkey, or comparable platforms.
• Understanding of endpoint, network, cloud, identity, and application security architectures.
• Experience with SIEM, EDR, XDR, threat detection, and security monitoring technologies.
• Knowledge of common attack techniques involving credential access, lateral movement, persistence, privilege escalation, and command-and-control behavior.
• Ability to analyze security telemetry, event logs, and detection outcomes.
• Familiarity with scripting and automation using Python, PowerShell, Bash, or similar languages.
• Understanding of incident response, threat hunting, and security control assessment.
• Strong analytical, investigative, and technical problem-solving capabilities.
• Excellent technical writing and stakeholder communication skills.
• Ability to manage sensitive security projects independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation based on experience and technical expertise.
• Opportunities to contribute to advanced cybersecurity and threat-informed defense initiatives.
• Professional development in adversary simulation, threat intelligence, and security validation.
• Collaboration with international teams across cybersecurity, engineering, and security operations.