Sr. Offensive Security Consultant

Managed Services; Saudi Arabia; On-site; SAR 150,000 - 200,000; Full time

Job summary

A cybersecurity firm in Saudi Arabia is seeking an Offensive Security Consultant to lead advanced penetration testing and red team operations. The ideal candidate should have over 5 years of relevant experience and strong skills in offensive security tools and methodologies. Responsibilities include collaborating with clients, executing sophisticated security operations, and preparing comprehensive reports. This position offers a dynamic environment with opportunities for growth and development.

Qualifications

• 5+ years of experience in penetration testing and red teaming.
• Professional certifications such as OSCP, OSEP, CRTO, or equivalent.
• Deep understanding of penetration testing methodologies and red team operations lifecycle.

Responsibilities

• Collaborate with clients to understand their security needs and objectives.
• Lead, plan, and execute advanced penetration testing and red team operations.
• Prepare and deliver detailed technical reports and executive-level presentations.

Skills

Offensive Security

Penetration Testing

Problem-Solving

Threat Intelligence

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field

Tools

Cobalt Strike

Metasploit

Sliver

Job description

Sr Offensive Security Consultant Managed Services is hiring a highly skilled Offensive Security Consultant to join cybersecurity team. The candidate will have in-depth expertise in offensive security, strong problem-solving skills, and a keen interest in competitor analysis. You will be responsible for planning and executing sophisticated Red Team operations and penetration testing, simulating cyberattacks, identifying vulnerabilities across networks, systems, and applications, and strengthening the organization's overall security posture while staying aware of competitor activities in the market.

Roles & Responsibilities

• Collaborate with clients to understand their security needs, objectives, and risk profiles
• Providing strategic guidance on improving detection, prevention, and response capabilities
• Lead, plan, and execute advanced penetration testing and red team operations across a wide range of environments, including web, network, mobile, wireless, cloud, source code, IoT, and physical assets
• Develop and simulate sophisticated, realistic threat scenarios using industry-standard frameworks (e.g. MITRE ATT&CK), mimicking adversary tactics, techniques, and procedures (TTPs)
• Customize attack simulations to reflect industry-specific threats and risk profiles
• Conduct specialized red team engagements, including social engineering, phishing, and physical security assessments
• Demonstrate hands-on expertise with a variety of offensive security tools and methodologies
• Prepare and deliver detailed technical reports and executive-level presentations
• Ensure documentation of all procedures, findings, and recommendations meet organizational and client standards
• Work closely with threat intelligence, SOC, incident response, and vulnerability management teams to drive holistic security improvements
• Contribute to developing internal methodologies, tooling, and red team frameworks
• Ensure all security testing aligns with applicable compliance frameworks and best practices
• Stay up to date with the latest cybersecurity trends, threats, vulnerabilities, and advancements in offensive security
• Continuously enhance red team methodologies based on industry evolution and new threat intelligence

Qualifications

• A bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field
• 5+ years of experience in penetration testing and red teaming
• Professional certifications such as OSCP, OSEP, CRTO, CRTL or CREST CRT/CCT (or equivalent)
• Deep understanding of penetration testing methodologies, adversary tactics, techniques, and procedures (TTPs), red team operations lifecycle, and purple teaming principles
• Experience developing and conducting red team and penetration testing engagements
• Experience with exploitation frameworks (e.g. Cobalt Strike, Metasploit, Sliver), custom payload development, and evasion techniques
• Strong report writing and communication skills, capable of translating technical findings into business risks and actionable recommendations