Senior Offensive Security Engineer

etisalat UAE; Dubai; Presencial; AED 180 000 - 280 000; Tempo integral

Resumo da oferta

etisalat UAE is seeking a senior security professional to perform red team assessments, threat modeling and adversarial testing across web, API, mobile and network layers. You will design and execute offensive security campaigns, use OSINT, C2s, and social engineering to simulate real-world threats, and report findings with actionable mitigations.

The role requires hands-on testing, reverse engineering, and malware/EDR bypass experience.

Qualificações

• CEH or similar certification preferred.
• Hands-on web application and API penetration testing experience.
• Experience with mobile application security testing.
• Independent reconnaissance, attack-surface discovery and exploitation.
• Scripting, automation and technical problem-solving.
• End-to-end assessment ownership and technical reporting.
• Experience in reverse engineering (hardware or software).
• Experience with OAuth 2.0 like auth protocols and web PT.
• Experience in mobile PT and network PT including wireless.
• Experience with malware development and EDR bypass.

Responsabilidades

• Compromise security by extracting information and infiltrating systems.
• Avoid blue team detection; assess attacker’s foothold and damage potential.
• Identify gaps in infrastructure and improve security posture.
• Lead hostile activity incl. advanced penetration testing for assessment.

Conhecimentos

CEH

OSINT

Penetration testing

Social engineering

PowerShell

Python

Exploit writing

Red team

Threat modeling

Ferramentas

C2 server tools

Reverse engineering tooling

EDR bypass techniques

Descrição da oferta de emprego

etisalat UAE is seeking a senior security professional to perform red team assessments, threat modeling and adversarial testing across web, API, mobile and network layers. You will design and execute offensive security campaigns, use OSINT, C2s, and social engineering to simulate real-world threats, and report findings with actionable mitigations.

The role requires hands-on testing, reverse engineering, and malware/EDR bypass experience.