Cybersecurity Engineer - Associate (UAE National)

Plays a critical role in strengthening the organization’s cybersecurity resilience. Focuses on identifying, exploiting, and mitigating vulnerabilities across internal and external systems. Conduct Vulnerability Assessment and Penetration Testing (VAPT) engagements. Simulate real-world cyberattacks to evaluate security posture. Assess the security of networks, applications, and infrastructure. Work closely with cross-functional teams to translate technical findings into actionable improvements. Contribute to the development of security standards, methodologies, and best practices. Help evolve and strengthen proactive defense strategies Develop in-house Red Team security tools (e.g., automated agents, scripts, and supporting utilities). Maintain, improve, and continuously enhance existing Red Team tooling and solutions. Requirements Must have: Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field — or equivalent practical experience Experience: Proven background in penetration testing, red team operations, or ethical hacking Strong understanding of network protocols, operating systems (Windows, Linux, macOS), and common attack vectors Hands-on experience with VAPT tools such as Burp Suite, Nmap, Metasploit, and similar frameworks Solid analytical and problem-solving skills with attention to detail Excellent written and verbal communication abilities, including experience in creating clear, actionable technical reports and presentations Preferred to have: Professional certifications such as OSCP, CEH, GPEN, or equivalent credentials Experience in developing or maintaining security guidelines, methodologies, or operational frameworks Familiarity with cloud platforms (AWS, Azure, GCP) and cloud security principles Scripting and automation proficiency (e.g., Python, Bash, PowerShell) Experience in social engineering assessments or physical security testing Working knowledge of threat intelligence and industry security frameworks (e.g., MITRE ATT&CK)