Principal / Senior Red Team Services Consultant (Remote, UAE/KSA)

About CrowdStrike

As a global leader in cybersecurity, CrowdStrike is dedicated to safeguarding the people, processes, and technologies that underpin modern organizations. Since its inception in 2011, CrowdStrike has remained steadfast in its mission to prevent breaches by pioneering the world’s most advanced AI-native security platform. Our systems process nearly 3 trillion events daily—data that continues to grow exponentially. Serving industries across the globe, our customers rely on CrowdStrike to maintain operational continuity, protect their communities, and ensure seamless progress in their endeavors. We take pride in contributing to a mission-driven organization that leverages AI to revolutionize the way we work. CrowdStrike fosters a culture of flexibility, autonomy, and responsible innovation, where employees are empowered to drive their careers while upholding the highest standards of collaboration and customer commitment. We seek dynamic professionals who embody limitless passion, an unwavering focus on innovation, and an unrelenting dedication to our customers, community, and each other. If you are ready to make a meaningful impact, the future of cybersecurity begins with you.

The Role at a Glance

The Principal / Senior Red Team Services Consultant will lead a specialized team focused on conducting Red Team operations that emulate real-world threat actors. These assessments are designed to evaluate the potential impact and likelihood of adversaries achieving their objectives across the Kill Chain and the MITRE ATT&CK Framework. This senior-level role requires the ability to collaborate with senior leadership, strategize and oversee assessment execution, and collaborate with other CrowdStrike Services functions to enhance customers’ security postures. The ideal candidate will demonstrate the capacity to mentor and manage less experienced team members while delivering high-impact results.

Key Responsibilities

• Leadership and Coordination: Serve as the primary point of contact for coordinating all Red Team activities, including penetration testing engagements, and ensure seamless execution across projects.
• Reporting and Strategy Development: Develop comprehensive reports detailing the findings of Red Team assessments, including actionable mitigation strategies tailored for both executive leadership and technical audiences.
• Cross-Functional Communication: Effectively communicate with stakeholders at all levels, from executive leadership to technical support teams, ensuring clarity and alignment on security objectives and outcomes.
• Technical Execution: Organize and lead penetration assessments targeting operating systems, applications, databases, and network infrastructure components to identify and enumerate threats.
• Team Collaboration and Mentorship: Work collaboratively with a diverse team to develop and enhance information security programs and resources, while providing guidance and mentorship to junior team members.
• Crisis Support: Offer specialized expertise and toolset guidance to operational teams during enterprise-wide crisis scenarios, such as large-scale production service outages, outside routine change management processes.
• Project Management: Operate as both a hands-on practitioner and project manager, overseeing various types of penetration testing offerings to ensure timely and effective delivery.

Qualifications and Skills

To excel in this role, candidates must meet the following requirements:

• Experience: Minimum of 5 years in Red Teaming or penetration testing activities, with at least 1 year in a leadership role preferred.
• Community Engagement: Active participation in the security community, such as conference speaking or contributions to tool development, is highly desirable.
• Technical Proficiency: Advanced experience with security assessment toolsets, including Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, and others.
• Methodologies and Best Practices: Comprehensive understanding of security methodologies, technologies, and industry best practices.
• Operating Systems: Proficiency in Windows, Linux, UNIX, and Mac operating systems.
• Networking Knowledge: Advanced experience with networking components such as routers, switches, load balancers, and wireless access points, as well as firewalls, proxies, mail servers, and web servers.
• Red Teaming Expertise: Advanced experience in Red Teaming, including vulnerability assessments, penetration testing, and adversary emulation.
• Automation and Scripting: Advanced experience in automating and scripting applications and systems to enhance operational efficiency and effectiveness.
• Certifications: Desirable certifications include OSCP, GPEN, OSCE, GCIH, and similar credentials that validate expertise in offensive security.