IT Security Analyst

Role overview

We are hiring a practical, hands-on Red Team specialist to support offensive security work for external clients in Dubai. The focus of this position is on real delivery, sound judgment, and measurable outcomes rather than certifications or polished job titles.

You will contribute to authorized Red Team, Purple Team, and adversary emulation engagements that help customers understand likely attack routes, weak points in their environments, and effective ways to strengthen their security posture.

What you will do

• Carry out Red Team and Purple Team activities for client engagements strictly within pre-approved boundaries.
• Run adversary emulation exercises across infrastructure, Active Directory, internal services, applications, and cloud setups.
• Spot security gaps and translate them into clear business impact for clients.
• Produce concise reports with proof, risk ranking, and actionable remediation guidance.
• Coordinate with client Blue Teams, SOC teams, infrastructure staff, and engineering teams whenever needed.
• Help refine the team’s Red Team approach, tooling, and delivery workflows.
• Suggest improvements that increase the effectiveness, speed, and maturity of offensive security services.

What we are looking for

• Proven practical background in Red Team work, offensive security, penetration testing, or adversary emulation.
• Good working knowledge of Windows, Linux, networking, Active Directory, web security, and basic cloud security concepts.
• Ability to automate or script tasks using Python, Bash, PowerShell, or similar tools.
• Understanding of MITRE ATT&CK, common attacker techniques and tactics, and realistic intrusion paths.
• Strong sense of responsibility, with no unsafe activity and no work outside the approved scope.
• Ability to explain findings to both technical and non-technical audiences.
• Excellent documentation and reporting skills.

Selection process

Practical experience is the top priority in this hiring process. Certifications, job titles, and company names can support your profile, but they do not replace demonstrated technical skill.

Applicants will go through technical testing on virtual machines before reaching the interview stage. Only candidates who pass these VM-based practical tests will continue in the process.

Nice to have

• Experience in client-facing security assessments.
• Background in Purple Team exercises.
• Exposure to detection engineering, EDR/SIEM platforms, or threat-informed defense.
• Knowledge of cloud platforms, CI/CD pipelines, containers, or enterprise infrastructure.

Compensation and benefits

• Monthly salary of 25,000 AED.
• No overtime; work is expected to fit within the normal working day.
• Supportive and respectful team culture.
• Open workplace where initiative is encouraged.
• Medical insurance is provided.
• Meal allowance of 125 AED per day, Monday through Friday.
• Lenovo laptop supplied for work.
• A one-hour lunch nap is permitted if it helps maintain productivity.
• Healthy communication, respect for personal time, and an emphasis on quality over appearance of busyness.

Additional information

This role is intended for someone who can handle real client projects responsibly, deliver high-quality offensive security assessments, and contribute to making clients substantially more secure.