Senior Offensive Security Consultant – FortiGuard Proactive Services

Fortinet, Inc.; Riyad Al Khabra; On-site; SAR 299,962 - 449,943; Full time

Job summary

A cybersecurity firm is seeking a Senior Offensive Security Consultant to lead engaging Red Team and penetration testing operations. This role involves collaborating with clients to understand their security needs, and executing comprehensive assessments of systems, networks, and applications. Candidates should have extensive experience in offensive security methodologies and hold relevant certifications. The position requires strong communication skills and technical expertise in security tools and scripting languages. Located in Riyad Al Khabra, the role offers full-time engagement with potential growth opportunities.

Qualifications

• Excellent communication skills in English.
• 8-10 years of experience in penetration testing roles.
• Bachelor's Degree in a relevant field.

Responsibilities

• Lead and deliver Red Team and penetration testing engagements.
• Plan and execute Red Team operations to simulate cyber threats.
• Conduct thorough penetration tests and provide recommendations.

Skills

Excellent written and verbal communication skills – English

Experience developing and conducting red team and penetration testing engagements

Experience performing application security assessments

Public speaking experience at known security conferences

Ability to build custom tools and implants

Solid knowledge of scripting languages (Python, Perl, PowerShell, Ruby)

Solid understanding of Active Directory and Azure AD

Experience with vulnerability assessments and social engineering campaigns

Strong understanding of operating system internals and endpoint security controls

Education

Bachelor's Degree in Computer Engineering, Computer Science or related field

8 - 10+ years' experience in Attack and Penetration testing roles

Certifications in offensive security (CREST, OSCP, OSEP, etc.)

Job description

Senior Offensive Security Consultant – FortiGuard Proactive Services

Job Info

• Job Identification 22621
• Job Category Incident Response
• Posting Date 04/08/2026, 07:03 AM
• Job Schedule Full time

Job Description

Responsibilities:

Customer Engagements: Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.

Red Team Operations: Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.

Penetration Testing: Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.

Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.

Documentation and Reporting: Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization’s security posture.

Required Skills:

• Excellent written and verbal communication skills – English
• Experience developing and conducting red team and penetration testing engagements
• Experience performing application security assessments
• Public speaking experience at known security conferences is a plus
• Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
• Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
• Solid understanding of Active Directory and Azure AD
• Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
• Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques

Qualifications:

Bachelor’s Degree in Computer Engineering, Computer Science or related field

Or 8 - 10+ years’ experience in Attack and Penetration testing roles

Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.