Sr Security Analyst - UAE

ValueMentor; Dubai; On-site; AED 240,000 - 480,000; Full time

Job summary

ValueMentor seeks an experienced security consultant to lead large penetration testing engagements end-to-end, acting as the technical and engagement lead for key client accounts and ensuring timely delivery.

You will mentor junior staff, review web, mobile, API and cloud assessments, contribute to presales, and develop security testing methods while communicating insights to executives onsite when required.

Qualifications

• 3-5 years of hands-on penetration testing or offensive security.
• Experience leading complex security assessments for large clients.
• Familiarity with OWASP, PTES, NIST and MITRE ATT&CK.

Responsibilities

• Lead and manage large, complex penetration testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication.
• Provide mentorship to junior and mid-level consultants.
• Support presales responses, proposals, and technical solutioning.
• Contribute to service development and internal innovations.

Skills

Penetration testing

Leadership

Client-facing

Threat modeling

Security standards

Red Teaming

Education

Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT

Job description

Job Description:

Key Responsibilities, Deliverables / Outcomes

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.

Technical Execution

• Perform and review web, mobile, API, network, cloud, and configuration security assessments.
• Maintain technical excellence across multiple service lines, staying updated on the latest vulnerabilities, tools, and attack techniques.
• Conduct business logic reviews, threat modeling, and red teaming exercises as needed.

Client Engagement

• Act as a trusted advisor to clients, providing strategic security recommendations and actionable insights.
• Be ready for onsite visits, workshops, and executive-level presentations when required.
• Handle sensitive engagements with professionalism and discretion.

Presales Support

• Support RFP responses, proposal writing, and technical solutioning.
• Participate in client sales meetings and scoping discussions.
• Provide accurate effort estimations and help define delivery models.

Practice Development

• Contribute to the development and refinement of security testing services and methodologies.
• Drive internal initiatives to improve quality, efficiency, and innovation in service delivery.
• Create technical content, whitepapers, or knowledge base articles to support team growth.

Key Skills

• 3-5 years of hands-on experience in penetration testing or offensive security.
• Proven track record of leading complex security assessments with large clients.
• Expertise in Web, Mobile, Network, API, Cloud, Configuration Reviews, and/or Red Teaming.
• Familiarity with security standards such as OWASP, PTES, NIST, and MITRE ATT&CK.
• Strong communication and client-facing skills.
• Experience supporting presales efforts, including proposals, SOWs, and client discussions.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT, or similar are preferred.

Key Competencies

• Accountability
• Communications - Oral & Written
• Analysis Skills
• Passion
• Adaptability