Senior Security Consultant (VAPT) – Dubai

Kingston Stanley; Dubai; On-site; AED 200,000 - 300,000; Full time

Job summary

A leading security consultancy in Dubai seeks a Senior Security Consultant (VAPT) to enhance client security. The role involves penetration testing, red teaming, and assessing physical security. Candidates should have extensive experience in cybersecurity and be proficient in tools like Cobalt Strike and Metasploit. This full-time position focuses on information technology and requires strong skills in threat simulations and security assessments.

Qualifications

• 5+ years’ experience in cybersecurity, focusing on penetration testing.
• Expertise in Active Directory exploitation and physical security testing.
• Familiarity with NAC, EDR, and DLP technologies.

Responsibilities

• Perform penetration tests on enterprise networks and Active Directory.
• Conduct red team simulations against advanced threats.
• Design and run phishing simulations for employee training.

Skills

Penetration testing

Red teaming

Active Directory exploitation

Scripting (Python, PowerShell, etc.)

Phishing simulation

Tools

Cobalt Strike

Metasploit

Mythic

Sliver

Job description

Overview

Senior Security Consultant (VAPT) – Dubai

We are looking for a Senior Security Consultant to help strengthen the security of our clients by identifying risks, simulating real-world attacks, and providing actionable recommendations.

Responsibilities

• Perform penetration tests on enterprise networks and Active Directory environments.
• Conduct red team and adversary simulations to measure resilience against advanced threats.
• Use tools and C2 frameworks such as Cobalt Strike, Metasploit, Mythic, and Sliver.
• Carry out physical penetration tests to assess building and access control security.
• Design and run phishing simulations to test employee awareness, and provide training where needed.
• Assess and bypass security controls including NAC, EDR, and DLP solutions to demonstrate potential attack paths.
• Use scripting or programming (Python, PowerShell, Shell, C / C++, Go, etc.) to develop and execute exploits or automation.

Qualifications

• 5+ years’ experience in cybersecurity, with strong focus on penetration testing and red teaming.
• Expertise in Active Directory (on-prem and Azure) exploitation.
• Hands-on experience with physical security testing.
• Skilled in adversary simulation and Layer 2 attack techniques.
• Strong knowledge of phishing simulation design and execution.
• Familiarity with NAC, EDR, and DLP technologies.
• Certifications such as OSCE, OSEP, CRTP, CRTE, CRTO (or equivalent) are preferred.
• Seniority level: Mid-Senior level.
• Employment type: Full-time.
• Job function: Information Technology.
• Industries: Information Services.