Red Team Architect: Adversary Emulation & OffSec

Malomatia; Doha; On-site; QAR 400,000 - 560,000; Full time

Job summary

Malomatia in Doha seeks a Red Team Expert to conduct advanced adversary emulation, offensive security assessments, and threat simulations to test defenses across networks, cloud, and applications. You will lead end-to-end engagements and design CTI-driven attack scenarios, including phishing simulations, exploit development, and C2 deployments.

Collaborating with Blue Team, SOC, Threat Intelligence, and Incident Response, you will enhance detection capabilities, strengthen security controls, and

Qualifications

• Proven experience in red teaming, penetration testing, adversary emulation, or offensive security operations.
• Strong understanding of the cyberattack lifecycle, MITRE ATT&CK framework, and real-world adversary TTPs.
• Hands-on experience with Active Directory attacks, privilege escalation, lateral movement, persistence, and post-exploitation techniques.
• Experience conducting advanced phishing simulations and assessing the effectiveness of email security controls.
• Proficiency in assessing enterprise networks, web applications, APIs, cloud environments, and endpoint security solutions.
• Practical experience with C2 frameworks such as Cobalt Strike, Brute Ratel C4, or Nighthawk.
• Knowledge of exploit development, scripting, payload customization, and techniques for evaluating EDR and other security control effectiveness.
• Experience with vulnerability assessment tools, web application scanners, and manual validation of security findings.
• Strong understanding of Operational Security (OpSec), engagement planning, risk management, and rules of engagement.
• Ability to produce clear technical reports, communicate findings effectively, and collaborate with defensive security teams.
• Strong analytical, problem-solving, and research skills, with the ability to adapt to evolving cyber threats.
• Preferred Certifications: OSCP, OSCE, CRTP, CRTO, CRTL, OSWE

Responsibilities

• Plan and execute end-to-end red team engagements simulating real-world threat actors, including initial access, privilege escalation, lateral movement, and controlled post-exploitation activities.
• Develop realistic attack scenarios based on Cyber Threat Intelligence (CTI), adversary TTPs, and emerging threats.
• Design and execute targeted phishing and social engineering simulations to assess employee awareness and security control effectiveness.
• Conduct offensive security assessments across enterprise networks, cloud environments, web applications, and production systems.
• Develop and customize exploits, payloads, and post-exploitation tools to evaluate EDR and other security controls.
• Configure, deploy, and manage C2 infrastructure and frameworks, including Cobalt Strike, Brute Ratel C4, and Nighthawk.
• Apply strong OpSec practices throughout engagements to maintain controlled, realistic, and discreet testing operations.
• Configure and operate vulnerability assessment and web application security scanning tools; analyze results to identify exploitable weaknesses and attack paths.
• Conduct offensive security research to track emerging vulnerabilities, attack techniques, and adversary methodologies, and develop new tools and testing approaches.
• Document findings, assess business and security impact, and provide actionable remediation recommendations.
• Collaborate with Blue Team, SOC, Threat Intelligence, and Incident Response teams to validate detection capabilities, improve security controls, and strengthen incident response readiness.
• Ensure all testing activities comply with approved scope, rules of engagement, and organizational security policies.

Skills

Red teaming

Penetration testing

Adversary emulation

MITRE ATT&CK

Active Directory attacks

Phishing simulations

Cobalt Strike

Brute Ratel C4

Nighthawk

Exploit development

Scripting

Payload customization

EDR testing

Vulnerability assessment

Education

OSCP

OSCE

CRTP

CRTO

CRTL

OSWE

Tools

Cobalt Strike

Brute Ratel C4

Nighthawk

Job description

Malomatia in Doha seeks a Red Team Expert to conduct advanced adversary emulation, offensive security assessments, and threat simulations to test defenses across networks, cloud, and applications. You will lead end-to-end engagements and design CTI-driven attack scenarios, including phishing simulations, exploit development, and C2 deployments.

Collaborating with Blue Team, SOC, Threat Intelligence, and Incident Response, you will enhance detection capabilities, strengthen security controls, and