Key Responsibilities:
- Lead and manage the Red Team in planning, executing, and evaluating red teaming exercises, adhering to industry best practices and established methodologies in addition to communicating with the clients for the requirements and information of the red team engagement.
- Propose scope and strategy for testing high value targets, and coordinate the tools and resources needed to conduct the work.
- Provide technical leadership and mentorship to junior team members, helping them develop their skills and grow as cybersecurity professionals.
- Foster a culture of continuous improvement within the Red Team, encouraging team members to enhance their technical skills and explore new attack vectors.
- Stay up to date with the latest cybersecurity threats, attack techniques, and vulnerability trends to continually improve the red team's skills and knowledge and use a variety of techniques to simulate real-world attacks, such as social engineering, phishing, and malwares.
- Improve internal offensive security programs, in addition to creating recurring test plans such as Adversary Emulation and Penetration Testing and collaborate with the Blue Team (defensive security team) and other stakeholders to design comprehensive and realistic red team scenarios that test the organization's security controls effectively.
- Experience and mindset in creating attack scenarios and developing TTPs, being inside frameworks and methodologies such as Miter Att&ck and Cyber Kill Chain.
- Conduct regular assessments of the organization's security posture, identifying vulnerabilities, and crafting attack strategies to simulate real-world threats and document and present red team findings, including detailed reports and actionable recommendations, to senior management and relevant teams.
Qualifications:
Bachelor's degree in information technology, Computer Science or a related discipline
Professional Certifications:
Professional certification in pen testing from internationally recognized institution or relevant are preferred.
- Red Team Operations and Adversary Emulation (GRTP)
- Certified Red Team Lead (CRTL)
- Certified Red Team Operator (CRTO)
- The OffSec Experienced Penetration Tester (OSEP)
Years of Experience:
- 8+ years of relevant experience
Nature of Experience:
- Prior experience in cyber security & pen testing services in a large organization
Job Specific Skills:
Strong knowledge of Web applications and Network Security
Knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security
Business Language Skills:
- Fluency in English and Arabic
