Senior Offensive Security Consultant (Red Team)

KPMG Middle East; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

KPMG Middle East is seeking a Senior Consultant for the Cyber Defense and Response team to deliver red team operations, penetration testing, adversarial emulations, and SOC maturity assessments across sectors in the UAE. You will simulate real-world attacks including web, mobile, API, and network VAPT with C2 infrastructure setup and social engineering engagements.

The role requires hands-on offensive security experience, including frameworks like MITRE ATT&CK, strong reporting skills, and

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• OSCP certification mandatory; candidates must hold at least one of: OSEP, OSWE, CCT INF, CCT APP.
• Proficiency with Burp Suite, Nmap, Metasploit, BloodHound.
• Proficient in scripting with Python, PowerShell, or Bash.
• Proficient in programming with Java, C#, or JavaScript.
• Excellent presentation and communication skills; able to interact with senior stakeholders.
• Commitment to continuous learning and professional development in offensive and defensive security.

Responsibilities

• Execute penetration tests of web apps, mobile apps, APIs, and network infrastructure.
• Participate in red team and social engineering engagements, including phishing and physical intrusion scenarios.
• Set up, maintain, and operate C2 infrastructure using tools such as Cobalt Strike or Sliver.
• Assist adversary emulation exercises based on MITRE ATT&CK.
• Prepare detailed, risk-based reports and present findings to internal and client teams.
• Develop internal tools, scripts, and documentation for offensive testing.
• Collaborate with blue/purple teams to improve client defenses.
• Stay up-to-date with offensive security techniques, vulnerabilities, and tools.
• Develop understanding of KPMG’s broader offerings to identify business opportunities.
• Support business development activities including proposal development and budgeting.
• Develop constructive client relationships and network.
• Build a professional network and be a trusted advisor.

Skills

Offensive security

Penetration testing

Social engineering

C2 infrastructure

MITRE ATT&CK

Web testing

Team collaboration

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Cobalt Strike

Sliver

Mythic

Job description

KPMG Middle East is seeking a Senior Consultant for the Cyber Defense and Response team to deliver red team operations, penetration testing, adversarial emulations, and SOC maturity assessments across sectors in the UAE. You will simulate real-world attacks including web, mobile, API, and network VAPT with C2 infrastructure setup and social engineering engagements.

The role requires hands-on offensive security experience, including frameworks like MITRE ATT&CK, strong reporting skills, and