Red Team Expert (Qatar) Doha

Requirements

Candidates must have proven experience in red teaming, penetration testing, and adversary emulation with a strong understanding of the cyberattack lifecycle. Proficiency in C2 frameworks, exploit development, and the MITRE ATT&CK framework is required.

Job Summary

The Red Team Expert is responsible for conducting advanced adversary emulation,
offensive security assessments, and threat simulation exercises to evaluate the
organization’s security posture. The role involves simulating real-world
cyberattacks based on threat intelligence, identifying security weaknesses
across enterprise infrastructure, cloud environments, and applications, and
collaborating with defensive security teams to strengthen detection and response
capabilities.

RESPONSIBILITIES

* Plan and execute end-to-end red team engagements simulating real-world threat
actors, including initial access, privilege escalation, lateral movement, and
controlled post-exploitation activities.
* Develop realistic attack scenarios based on Cyber Threat Intelligence (CTI),
adversary Tactics, Techniques, and Procedures (TTPs), and emerging threats.
* Design and execute targeted phishing and social engineering simulations to
assess employee awareness and security control effectiveness.
* Conduct offensive security assessments across enterprise networks, cloud
environments, web applications, and production systems.
* Develop and customize exploits, payloads, and post-exploitation tools to
evaluate the effectiveness of Endpoint Detection and Response (EDR) solutions
and other security controls.
* Configure, deploy, and manage Command-and-Control (C2) infrastructure and
frameworks, including Cobalt Strike, Brute Ratel C4, and Nighthawk.
* Apply strong Operational Security (OpSec) practices throughout engagements to
maintain controlled, realistic, and discreet testing operations.
* Configure and operate vulnerability assessment and web application security
scanning tools; analyze results to identify exploitable weaknesses and attack
paths.
* Conduct offensive security research to track emerging vulnerabilities, attack
techniques, and adversary methodologies, and develop new tools and testing
approaches.
* Document findings, assess business and security impact, and provide
actionable remediation recommendations.
* Collaborate with Blue Team, SOC, Threat Intelligence, and Incident Response
teams to validate detection capabilities, improve security controls, and
strengthen incident response readiness.
* Ensure all testing activities comply with approved scope, rules of
engagement, and organizational security policies.

QUALIFICATIONS

* Proven experience in red teaming, penetration testing, adversary emulation,
or offensive security operations.
* Strong understanding of the cyberattack lifecycle, MITRE ATT&CK framework,
and real-world adversary TTPs.
* Hands-on experience with Active Directory attacks, privilege escalation,
lateral movement, persistence, and post-exploitation techniques.
* Experience conducting advanced phishing simulations and assessing the
effectiveness of email security controls.
* Proficiency in assessing enterprise networks, web applications, APIs, cloud
environments, and endpoint security solutions.
* Practical experience with C2 frameworks such as Cobalt Strike, Brute Ratel
C4, or Nighthawk.
* Knowledge of exploit development, scripting, payload customization, and
techniques for evaluating EDR and other security control effectiveness.
* Experience with vulnerability assessment tools, web application scanners, and
manual validation of security findings.
* Strong understanding of Operational Security (OpSec), engagement planning,
risk management, and rules of engagement.
* Ability to produce clear technical reports, communicate findings effectively,
and collaborate with defensive security teams.
* Strong analytical, problem-solving, and research skills, with the ability to
adapt to evolving cyber threats.

Preferred Certifications:
 
* Offensive Security Certified Professional (OSCP)
* Offensive Security Certified Expert (OSCE)
* Certified Red Team Professional (CRTP)
* Certified Red Team Operator (CRTO)
* Certified Red Team Lead (CRTL)
* Offensive Security Web Expert (OSWE)

Responsibilities

The Red Team Expert conducts advanced adversary emulation and threat simulation exercises to evaluate the organization’s security posture. They collaborate with defensive teams to identify vulnerabilities and strengthen detection and response capabilities across enterprise infrastructure.

We are a job aggregator. All rights belong to the original company or recruiter. We do not claim ownership of any listings.