Текст заказа
Freelance Red Teaming Expert | (Ca-00598)
Компания: suresecure GmbH
Город: Abu Dhabi
suresecure is a German cybersecurity company specializing in Managed SOC and Incident Response. For a client project in Abu Dhabi, we are looking for an experienced freelance Red Teaming & Offensive Application Security Expert.
**The engagement**
You attack the client's infrastructure and applications the way real adversaries would and show where detection and response still fall short. Working closely with the SOC and Incident Response teams, you turn your findings into concrete detection, hardening and secure development measures.
**Scope of work**
* Red team assessments and adversary emulation based on real-world TTPs (MITRE ATT&CK)
* Attacks on Active Directory, cloud and network: initial access, lateral movement, privilege escalation, persistence
* Offensive testing of web, mobile and API applications: authentication, authorization, session handling, business logic
* Chaining application vulnerabilities into attack paths into the infrastructure
* Purple teaming sessions with SOC and Incident Response, including retesting of fixes
* Support for development teams on remediation; threat modeling and code review where needed
* Technical reports and management summaries with prioritized recommendations
**Must have**
* Several years of offensive security experience, including solid red teaming experience
* Strong knowledge of Active Directory attacks (Kerberos, ADCS, tiering)
* Hands-on experience with C2 frameworks, EDR evasion and OPSEC
* Proven experience testing web applications and APIs (OWASP, Burp Suite Pro)
* Solid command of MITRE ATT&CK
* Business-fluent English
* UAE work permit
**Nice to have**
* Incident Response or SOC background
* Cloud attacks (Azure/Entra ID, AWS)
* Mobile application testing (iOS, Android, OWASP MASVS)
* Source code review, SAST/DAST tooling, development experience
* Regulated environments, ideally financial sector
* Detection engineering (Sigma, KQL, YARA-L)
* Certifications such as OSCP, OSEP, OSWE, CRTO, CRTE, BSCP
* Arabic language skills
**Engagement details**
* Location: on-site at the client in Abu Dhabi
* Start: asap | Duration: 2 months, extension possible