Offensive Security Engineer

Think you can outsmart modern enterprise defenses instead of just scanning for vulnerabilities?

We are currently partnering with a fast-growing cybersecurity organisation in Dubai that is building a high-performing offensive security division focused on enterprise and government environments across the GCC.

This Red Team Engineer position offers the opportunity to work on complex penetration testing engagements, adversary simulations, and offensive security operations across cloud, hybrid, and on-premise infrastructures. Working closely with senior security specialists, the successful candidate will play a key role in shaping offensive security methodologies while supporting a growing PTaaS environment.

Operating in one of the world’s fastest-growing cybersecurity markets, this role will challenge your technical ability across exploitation, post-exploitation, Active Directory attacks, and web application security. You will also gain exposure to client-facing engagements, technical reporting, and advanced offensive tooling used in real-world environments.

Given the level of autonomy and technical capability required, we will only be able to consider candidates who meet the following requirements:

• 2–4 years of hands-on offensive security, penetration testing, or red team experience
• Strong experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Cobalt Strike or equivalent frameworks
• Proficiency in Python, Bash, or PowerShell scripting
• Strong understanding of Active Directory attacks, OWASP Top 10, and post-exploitation techniques
• Native or professional-level Arabic communication skills alongside strong written English

Candidates holding certifications such as OSCP, PNPT, CEH, or eJPT will be viewed favourably.