Senior IT Cyber Security Assurance and Risk Specialist

About the role

The Senior IT Cyber Security Assurance and Risk Specialist will lead the protection of Emirates Nuclear Energy Corporation’s information systems. The role focuses on preventing unauthorized disclosure or modification by coordinating with system owners and internal stakeholders to continuously improve the organisation’s security posture.

Key responsibilities

• Scope and execute penetration testing on systems, networks and applications using manual and automated methods.
• Utilise tools such as Metasploit, Nmap, Nessus, Burp Suite, Wireshark, Aircrack‑ng, SQLmap, Tenable, John the Ripper, Hydra, OWASP ZAP and SOAP UI to identify and exploit vulnerabilities.
• Produce clear penetration testing reports with findings and remediation recommendations.
• Lead vulnerability management activities, including assessments, reporting, prioritisation and validation of remediation.
• Conduct red‑team operations, breach simulations, phishing campaigns and collaborate with blue‑team defenses.
• Perform secure architecture reviews, endpoint detection and response investigations, and cloud security assessments.
• Provide technical guidance, training to junior team members and support to IT teams on security matters.
• Stay current on emerging threats, security trends and industry standards.

Required profile

• Proven experience in penetration testing, vulnerability management and red‑team activities.
• Hands‑on experience with security assessments for on‑premise and cloud environments.
• Ability to produce detailed technical reports and deliver training to junior staff.
• Strong investigative skills for analysing cybersecurity incidents and recommending mitigations.

Required skills

• Metasploit
• Nmap
• Nessus
• Burp Suite
• Wireshark
• Aircrack‑ng
• SQLmap
• Tenable
• John the Ripper
• Hydra
• OWASP ZAP
• SOAP UI
• Endpoint Detection and Response (EDR) tools
• Cloud security concepts and tools
• Vulnerability management processes
• Red‑team operations