Website Noon
Job Description:
We are looking for a highly-motivated and dynamic candidate to join our Red Team and who will support our red teaming security program and offensive security operations. The candidate is expected to participate in Red Team/Purple team operations/penetration testing and adversary emulation assessments. Additionally, the candidate will assist Noon’s company in enhancing their cybersecurity resilience by providing an “attacker’s approach” and identifying high-impact attack vectors that threat actors could use.
Job Responsibilities:
- Assist in overseeing the design, implementation, and delivery of Red Team assessments, including the pentesting, reporting, and metrics.
- Define scope, objectives, and timelines for executing red team assessments and leverage data to create valuable metrics.
- Plan and perform adversarial simulated attacks against organizations’ services, platforms, and infrastructures, to detect security vulnerabilities ahead of the attackers.
- Function as a SME (Subject-Matter Expert) and primary contact to coordinate Red Team activities, organize and lead penetration testing activities.
- Adopt new TTPs and implement them in Red and Purple team assessments.
- Conduct research on new emerging threats and risks. Leading critical security initiatives (e.g., validation and re-tests, root cause analysis proof-of-concept, and process design).
- Run the day-to-day red team operations and working with other red teamers to deliver high-quality assessments focused on infrastructure, mobile, and web applications, purple team, wireless and social engineering.
Job Requirements:
- Industry certifications such as OSCE, OSWE, CRPT, GPEN, GWAPT, GXPN are desirable.
- Establishes industry expertise through writing, public speaking, shipping open-source projects, or online presence.
- In-depth knowledge with hands-on experience of advanced web applications penetration testing OR mobile applications.
- Ability to conduct source code reviews and define mitigation controls within source code for languages such as Python, Node.js, Java, etc.
- Advanced knowledge of Active Directory, Windows exploitation and AV evasion techniques.
Qualification & Experience:
- +3 years of experience in Red Team/Purple team operations/penetration testing/adversary emulation assessments
- Experience in performing network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social engineering assessments
Job Details:
Company: Noon
Vacancy Type: Full Time
Job Location: Dubai, UAE
Application Deadline: N/A
Jobarabic.com
Report Job