Senior Cyber Test & Evaluation

Looking for the Emirati Talent with Emirati Passport who will be responsible for leading, planning, and executing advanced penetration testing and vulnerability assessment engagements across complex enterprise environments, including networks, applications, cloud platforms, and emerging technologies.

Skills/Certifications

• Bachelor's degree in computer science, Information Technology, or related field
• Strong proficiency in common penetration testing and vulnerability assessment tools and techniques
• Expert understanding of networking and operating systems
• Excellent analytical and problem-solving skills
• Strong written and verbal communication skills
• Ability to lead a team and work effectively with clients
• Relevant certifications such as OSCP/OSCP+, OSEP, OSWE, CRTO, CISSP, CARTP, CARTA, GWAPT, GPEN, GXPN, or equivalent is highly desirable.

Minimum Work Experience

3-4+ years of experience in penetration testing, vulnerability assessments, red teaming, application security testing, mobile application security, cloud security assessments, and source code reviews.

The role requires end-to-end ownership of engagements, from requirement gathering, scoping, and methodology definition to execution, reporting, and remediation validation. The Senior Consultant is expected to act as a trusted technical authority and advisor, engaging directly with stakeholders to align security testing activities with business risks and regulatory requirements.

Additionally, the role requires driving quality assurance, standardization of methodologies, and continuous improvement of testing frameworks, while mentoring team members and contributing to the overall maturity of Cyber Test & Evaluation capabilities.

Security Testing

• Developing and executing advanced red team, penetration testing, and adversarial simulation engagements to emulate real-world threats.
• Designing customized, risk-based testing strategies aligned with client environments and threat landscape.
• Leveraging advanced exploitation techniques, automation frameworks, and attack simulations to identify complex vulnerabilities.
• Performing security assessments of cloud environments, containers, Kubernetes platforms, APIs, CI/CD pipelines, and Infrastructure as Code (IaC).
• Conducting threat-informed testing against modern attack surfaces including SaaS, hybrid cloud, and identity platforms.

Reporting

• Developing and maintaining high-quality, audit-ready technical reports and executive summaries.
• Ensuring findings are accurately risk-rated, contextually explained, and supported by evidence.
• Presenting results to technical teams and senior leadership, clearly articulating risk and remediation strategies.

Mentoring

• Mentoring and coaching junior and intermediate consultants through hands-on guidance, technical reviews, and structured development plans.
• Reviewing assessment deliverables produced by consultants and ensuring adherence to quality standards, methodologies, and reporting expectations.