Sr. Offensive Security Consultant

Managed Services; Riyad Al Khabra; On-site; SAR 300,000 - 400,000; Full time

Job summary

A prominent cybersecurity firm is seeking a highly skilled Sr Offensive Security Consultant to join their team in Saudi Arabia, Al-Qassim Province. The role involves leading Red Team operations and executing advanced penetration testing. Ideal candidates will have 5+ years of experience, relevant certifications, and strong expertise in offensive security methodologies.

Qualifications

• 5+ years of experience in penetration testing and red teaming.
• Professional certifications such as OSCP, OSEP, CRTO, CRTL or CREST CRT / CCT.
• Deep understanding of penetration testing methodologies and procedures.

Responsibilities

• Collaborate with clients to understand security needs and objectives.
• Lead, plan, and execute penetration testing across various environments.
• Prepare and deliver detailed technical reports and presentations.

Skills

Offensive security expertise

Problem-solving skills

Competitor analysis

Report writing

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

Cobalt Strike

Metasploit

Sliver

Job description

Sr Offensive Security Consultant

Managed Services is hiring a highly skilled Offensive Security Consultant to join cybersecurity team. The candidate will have in-depth expertise in offensive security, strong problem-solving skills, and a keen interest in competitor analysis. you will be responsible for planning and executing sophisticated Red Team operations and penetration testing, simulating cyberattacks, identifying vulnerabilities across networks, systems, and applications, and strengthening the organization's overall security posture while staying aware of competitor activities in the market.

Roles & Responsibilities

• Collaborate with clients to understand their security needs, objectives, and risk profiles
• providing strategic guidance on improving detection, prevention, and response capabilities
• Lead, plan, and execute advanced penetration testing and red team operations across a wide range of environments, including web, network, mobile, wireless, cloud, source code, IoT, and physical assets
• Develop and simulate sophisticated, realistic threat scenarios using industry-standard frameworks (e.g., MITRE ATT&CK), mimicking adversary tactics, techniques, and procedures (TTPs)
• Customize attack simulations to reflect industry-specific threats and risk profiles
• Conduct specialized red team engagements, including social engineering, phishing, and physical security assessments
• Demonstrate hands‑on expertise with a variety of offensive security tools and methodologies
• Prepare and deliver detailed technical reports and executive‑level presentations
• Ensure documentation of all procedures, findings, and recommendations meets organizational and client standards
• Work closely with threat intelligence, SOC, incident response, and vulnerability management teams to drive holistic security improvements
• Contribute to developing internal methodologies, tooling, and red team frameworks
• Ensure all security testing aligns with applicable compliance frameworks and best practices
• Stay up to date with the latest cybersecurity trends, threats, vulnerabilities, and advancements in offensive security
• Continuously enhance red team methodologies based on industry evolution and new threat intelligence

Requirements

• A bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field.
• 5+ years of experience in penetration testing and red teaming.
• Professional certifications such as OSCP, OSEP, CRTO, CRTL or CREST CRT / CCT (or equivalent).
• Deep understanding of penetration testing methodologies, adversary tactics, techniques, and procedures (TTPs), red team operations lifecycle, and purple teaming principles.
• Experience developing and conducting red team and penetration testing engagements.
• Experience with exploitation frameworks (e.g., Cobalt Strike, Metasploit, Sliver), custom payload development, and evasion techniques.
• Strong report writing and communication skills, capable of translating technical findings into business risks and actionable recommendations.