Job description

The role is a Senior Red Team Consultant responsible for leading and executing penetration tests across network infrastructure, client-facing web applications, mobile applications, APIs, and related systems. The position requires identifying and exploiting vulnerabilities in internal and external environments, performing threat modeling, simulating real-world attacks, and conducting detailed documentation of findings. The consultant will use frameworks such as PTES, OWASP, and MITRE ATT&CK, as well as tools including Burp Suite, Nmap, Metasploit, Nessus, Wireshark, and mobile testing frameworks. The role involves performing active directory penetration testing, reviewing application designs and source code, applying both manual testing and automated scanning techniques, and contributing to internal tool and methodology development. The position requires continuous research of emerging attack techniques and security trends, delivering technical reporting and high-level executive summaries, and collaborating with clients to provide remediation guidance. Experience with scripting languages such as Python and Bash is needed to automate testing tasks and develop exploits. Certifications such as OSCP, OSWA, OSWE, OSCE, GWAPT, or GPEN are considered strong advantages. The consultant must communicate effectively in Arabic and English.