Senior Adversary Emulation Specialist (Remote, UAE)

About the role

A Senior Adversary Emulation Specialist is sought to evaluate and strengthen organizational cybersecurity defenses by simulating the tactics, techniques and procedures (TTPs) of sophisticated cyber adversaries. The role develops controlled attack scenarios from real-world threat intelligence, assesses defensive capabilities, identifies security gaps and improves detection and response. It works closely with red teams, blue teams, threat intelligence analysts and security engineers, all remotely within approved environments and authorized testing scopes.

Key responsibilities

• Design and lead controlled adversary emulation exercises based on cyber threat intelligence
• Research advanced persistent threats, cybercriminal groups and emerging attack techniques
• Map adversary TTPs to the MITRE ATT&CK framework
• Develop emulation plans covering endpoints, networks, cloud, identity and applications
• Run authorized simulations to evaluate detection and response, and assess monitoring coverage, alerts and escalation
• Validate detection rules and EDR, SIEM, XDR, identity security and network defense capabilities
• Develop reusable simulation scripts, analyze telemetry and logs, and coordinate purple team exercises
• Identify control weaknesses, propose remediations, validate improvements and document results
• Prepare executive reports and mentor junior security professionals

Required profile

• Bachelor's or master's degree in Cybersecurity, Computer Science, IT, Digital Forensics or a related field
• Significant experience in adversary emulation, red teaming, penetration testing, threat intelligence or security validation
• Ability to analyze security telemetry and logs, and to write technically and communicate with stakeholders
• Independently manages sensitive security projects remotely

Required skills

• MITRE ATT&CK and threat-informed defense
• Familiarity with MITRE CALDERA, Atomic Red Team, Infection Monkey or similar
• SIEM, EDR, XDR and threat detection
• Scripting with Python, PowerShell or Bash

What we offer

• 100% remote work
• Competitive compensation based on experience and expertise
• Professional development in adversary simulation and threat intelligence
• Collaboration with international teams

To apply, send an updated CV through the employer, stating your experience in adversary emulation, red teaming, MITRE ATT&CK, threat intelligence and security testing. Candidates should confirm employment arrangements, residency and work authorization before accepting an offer.