Senior Adversary Emulation Specialist

Job Title: Senior Adversary Emulation Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Adversary Emulation Specialist to evaluate and strengthen organizational cybersecurity defenses by simulating the tactics, techniques, and procedures (TTPs) of sophisticated cyber adversaries. The role focuses on developing controlled attack scenarios based on real-world threat intelligence, assessing defensive capabilities, identifying security gaps, and improving detection and response effectiveness.

The successful candidate will work closely with red teams, blue teams, threat intelligence analysts, and security engineering professionals to validate security controls and enhance organizational resilience. All activities will be conducted remotely within approved environments and explicitly authorized testing scopes.

Key Responsibilities

• Design and lead controlled adversary emulation exercises based on relevant cyber threat intelligence.
• Research advanced persistent threats, cybercriminal groups, and emerging attack techniques to develop realistic simulation scenarios.
• Map adversary tactics, techniques, and procedures to the MITRE ATT&CK framework.
• Develop emulation plans that assess security controls across endpoints, networks, cloud environments, identity systems, and applications.
• Conduct authorized simulations of attack behaviors to evaluate organizational detection and response capabilities.
• Assess defensive visibility, security monitoring coverage, alert generation, and incident escalation procedures.
• Collaborate with security operations teams to validate detection rules and identify monitoring gaps.
• Evaluate endpoint detection and response, SIEM, XDR, identity security, and network defense capabilities.
• Develop controlled testing procedures and reusable simulation scripts within approved environments.
• Analyze exercise telemetry, security logs, and investigation records to determine whether simulated activities were detected and handled appropriately.
• Identify weaknesses in preventive controls, defensive configurations, and incident response workflows.
• Coordinate purple team exercises to improve collaboration between offensive and defensive security functions.
• Develop remediation recommendations based on observed control weaknesses and measurable testing outcomes.
• Conduct follow-up validation to confirm that security improvements effectively address identified gaps.
• Maintain detailed documentation of exercise objectives, authorization, scope, execution results, and technical findings.
• Prepare executive reports and technical assessments outlining adversary emulation results and organizational risk exposure.
• Mentor junior security professionals and promote continuous improvement in adversary emulation practices.

Qualifications and Experience

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related field.
• Significant professional experience in adversary emulation, red teaming, penetration testing, threat intelligence, or security validation.
• Strong understanding of advanced cyberattack methodologies and real-world adversary behavior.
• Practical knowledge of the MITRE ATT&CK framework and threat-informed defense methodologies.
• Experience developing adversary emulation plans and controlled attack simulation scenarios.
• Familiarity with security testing frameworks and tools such as MITRE CALDERA, Atomic Red Team, Infection Monkey, or comparable platforms.
• Understanding of endpoint, network, cloud, identity, and application security architectures.
• Experience with SIEM, EDR, XDR, threat detection, and security monitoring technologies.
• Knowledge of common attack techniques involving credential access, lateral movement, persistence, privilege escalation, and command-and-control behavior.
• Ability to analyze security telemetry, event logs, and detection outcomes.
• Familiarity with scripting and automation using Python, PowerShell, Bash, or similar languages.
• Understanding of incident response, threat hunting, and security control assessment.
• Strong analytical, investigative, and technical problem-solving capabilities.
• Excellent technical writing and stakeholder communication skills.
• Ability to manage sensitive security projects independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation based on experience and technical expertise.
• Opportunities to contribute to advanced cybersecurity and threat-informed defense initiatives.
• Professional development in adversary simulation, threat intelligence, and security validation.
• Collaboration with international teams across cybersecurity, engineering, and security operations.

How to Apply

Interested candidates should submit an updated CV highlighting their experience in adversary emulation, red team operations, MITRE ATT&CK, threat intelligence, security testing, and defensive control validation.

Application Subject: Application – Senior Adversary Emulation Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer. All adversary emulation, penetration testing, and security simulation activities must have documented authorization, clearly defined scope, and appropriate safeguards. Formal security certifications and regulated cybersecurity services must be provided by appropriately qualified and authorized professionals.