Senior Cyber Test & Evaluation

CPX; Abu Dhabi; On-site; AED 260,000 - 520,000; Full time

Job summary

CPX is seeking Emirati talent to lead and execute advanced penetration testing and vulnerability assessment engagements across complex environments in the UAE. The Senior Consultant will own engagements end-to-end, from scoping to remediation validation, while guiding a team and engaging with clients on risk-based security testing strategies.

Candidates should have 3-4+ years in pentesting, strong networking/OS expertise, and relevant certifications (OSCP, CISSP, etc.).

Qualifications

• Bachelor's degree in computer science, IT, or related field.
• 3-4+ years of experience in penetration testing, vulnerability assessments, red teaming, app security, mobile security, cloud security, and code reviews.
• End-to-end ownership of engagements from requirements to remediation validation.
• Ability to mentor team members and advise stakeholders.

Responsibilities

• Develop and execute advanced red team, pentesting, and adversarial simulations.
• Design risk-based testing strategies aligned with client environments.
• Utilize exploitation techniques and automation to identify complex vulnerabilities.
• Perform security assessments of cloud environments, containers, Kubernetes, APIs, CI/CD, and IaC.
• Provide audit-ready reports and executive summaries.
• Mentor junior consultants and ensure quality, methodology adherence.

Skills

Penetration testing

Vulnerability assessment

Networking

Operating systems

Analytical skills

Communication skills

Leadership

Client engagement

Certifications (OSCP, OSWE, CISSP)

Education

Bachelor's degree in computer science/IT

Tools

OSCP/OSCP+, OSEP, OSWE, CRTO, CISSP, CARTP, CARTA, GWAPT, GPEN, GXPN

Job description

Looking for the Emirati Talent with Emirati Passport who will be responsible for leading, planning, and executing advanced penetration testing and vulnerability assessment engagements across complex enterprise environments, including networks, applications, cloud platforms, and emerging technologies.

Skills/Certifications

• Bachelor's degree in computer science, Information Technology, or related field
• Strong proficiency in common penetration testing and vulnerability assessment tools and techniques
• Expert understanding of networking and operating systems
• Excellent analytical and problem-solving skills
• Strong written and verbal communication skills
• Ability to lead a team and work effectively with clients
• Relevant certifications such as OSCP/OSCP+, OSEP, OSWE, CRTO, CISSP, CARTP, CARTA, GWAPT, GPEN, GXPN, or equivalent is highly desirable.

Minimum Work Experience

3-4+ years of experience in penetration testing, vulnerability assessments, red teaming, application security testing, mobile application security, cloud security assessments, and source code reviews.

The role requires end-to-end ownership of engagements, from requirement gathering, scoping, and methodology definition to execution, reporting, and remediation validation. The Senior Consultant is expected to act as a trusted technical authority and advisor, engaging directly with stakeholders to align security testing activities with business risks and regulatory requirements.

Additionally, the role requires driving quality assurance, standardization of methodologies, and continuous improvement of testing frameworks, while mentoring team members and contributing to the overall maturity of Cyber Test & Evaluation capabilities.

Security Testing

• Developing and executing advanced red team, penetration testing, and adversarial simulation engagements to emulate real-world threats.
• Designing customized, risk-based testing strategies aligned with client environments and threat landscape.
• Leveraging advanced exploitation techniques, automation frameworks, and attack simulations to identify complex vulnerabilities.
• Performing security assessments of cloud environments, containers, Kubernetes platforms, APIs, CI/CD pipelines, and Infrastructure as Code (IaC).
• Conducting threat-informed testing against modern attack surfaces including SaaS, hybrid cloud, and identity platforms.

Reporting

• Developing and maintaining high-quality, audit-ready technical reports and executive summaries.
• Ensuring findings are accurately risk-rated, contextually explained, and supported by evidence.
• Presenting results to technical teams and senior leadership, clearly articulating risk and remediation strategies.

Mentoring

• Mentoring and coaching junior and intermediate consultants through hands-on guidance, technical reviews, and structured development plans.
• Reviewing assessment deliverables produced by consultants and ensuring adherence to quality standards, methodologies, and reporting expectations.