Senior Red Team & VAPT Specialist

Dmatics It Solutions; Dubai; Vor Ort; AED 300.000 - 600.000; Vollzeit

Zusammenfassung

Dmatics It Solutions in the United Arab Emirates seeks a senior security consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT) and adversary simulation. You will lead complex tests across web apps, networks, and Microsoft 365 environments, delivering risk-rated findings with actionable remediations.

Responsibilities include designing controlled red-team scenarios, validating controls, and supporting ISO 27001 security assessments.

Qualifikationen

• 8+ years hands-on web application VAPT experience.
• 5+ years Microsoft 365 / Entra ID security assessment experience.
• 5+ years Active Directory security experience.
• Strong Windows and Linux security, privilege escalation knowledge.
• Experience in network segmentation and firewall/security-policy assessment.
• Strong understanding of OWASP testing methodology and vulnerability validation.
• Familiarity with the MITRE ATT&CK framework and ISO 27001 controls.
• Excellent report writing and customer presentation skills.

Aufgaben

• Perform comprehensive web app VAPT, authenticated and unauthenticated testing within scope.
• Lead internal and external network VAPT, validate external attack surface.
• Perform Microsoft 365 security assessments and verify vulnerabilities.
• Design and execute adversary-simulation scenarios and red-team objectives.
• Document attack paths, controls that failed, and remediation recommendations.
• Support ISO 27001 security-control assessments and present findings.

Kenntnisse

Web app VAPT

Microsoft 365 security

AD security

Windows security

Linux security

OWASP testing

MITRE ATT&CK

ISO 27001 controls

Risk reporting

Tools

Burp Suite

Kali Linux

Nmap

Nessus

Wireshark

BloodHound

Microsoft security tooling

AlgoSec

BAS platforms

Jobbeschreibung

Dmatics It Solutions in the United Arab Emirates seeks a senior security consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT) and adversary simulation. You will lead complex tests across web apps, networks, and Microsoft 365 environments, delivering risk-rated findings with actionable remediations.

Responsibilities include designing controlled red-team scenarios, validating controls, and supporting ISO 27001 security assessments.