Senior Red Team Consultant Accenture Middle East

Job Overview
As a penetration tester, you will lead and execute assessments across both network infrastructure and client-facing applications, including web and mobile platforms. You will identify security vulnerabilities, assess risk, and collaborate with clients to provide clear and practical remediation guidance. This role requires a strong understanding of both network-based and application-level security testing.

Responsibilities

• Conduct penetration tests across networks, web applications, mobile applications, APIs, and related systems.
• Identify and exploit vulnerabilities in both internal and external environments.
• Perform threat modeling, simulate real-world attacks, and document findings.
• Produce detailed technical reports and high-level executive summaries.
• Collaborate with clients to explain findings and support remediation efforts.
• Continuously research and stay up to date with the latest attack techniques and security trends.
• Develop and improve internal tools, scripts, and methodologies used during assessments.

Requirements

• 3-5 years of experience in penetration testing with proven experience in both network and web/mobile application testing.
• Solid understanding of common penetration testing and security frameworks (e.g., PTES, OWASP, MITRE ATT&CK).
• Experience using tools such as Burp Suite, Nmap, Metasploit, Nessus, Wireshark, and mobile testing frameworks.
• Experience with active directory penetration testing.
• Understanding of business use cases, abuse cases, and their impact on security.
• Ability to perform security reviews of application design and source code.
• Familiarity with both manual testing and automated scanning techniques.
• Broad understanding of various penetration specialties from infrastructure to applications and cloud testing
• Demonstrable ability in deriving security requirements from functional objectives with limited knowledge of the underlying solution and customer/team direction
• Ability to clearly communicate technical concepts to technical and non-technical audiences.
• Strong reporting skills with attention to technical accuracy and business relevance.
• Knowledge of scripting languages (e.g., Python, Bash) to automate tasks and develop exploits.
• Relevant certifications such as OSCP, OSWA, OSWE, OSCE, GWAPT, or GPEN are a strong plus.
• Excellent written and verbal communication skills in Arabic and English.