Red Team Consultant – Cloud Security

About the role

You will join Mandiant Consulting’s Google Cloud team as a Red Team Consultant, delivering offensive security engagements for high‑profile clients across the Middle East. The role blends hands‑on technical assessments, tool development, and strategic advisory to help organisations strengthen their defenses.

Key responsibilities

• Perform red‑team, purple‑team and other offensive cyber‑security engagements, including adversarial emulation, web, mobile, wireless and cloud assessments.
• Advise clients on best‑practice remediation and security hardening across technical and process domains.
• Develop and maintain custom security tools using languages such as Python, C#, C/C++, Rust or Nim.
• Research emerging offensive techniques and incorporate threat‑actor intelligence into engagements.
• Produce comprehensive technical and executive‑level reports and presentations.
• Scope engagements, lead project teams from kickoff through remediation, and mentor junior staff.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or equivalent practical experience.
• Minimum 3 years of experience in at least three of the following areas: network security, red‑team assessments, EDR evasion, cloud security, social engineering, scripting or tool development.
• Hands‑on experience with operating‑system security on Linux and/or Windows.
• Relevant offensive‑security certifications (e.g., OSCP, OSCE, OSEP, CCSAS, CCT INF) are preferred.
• Experience with payload development, lateral movement, privilege escalation and EDR evasion.
• Proficiency in at least four of: network protocols, threat‑intelligence analysis, system administration, project management, application development, incident response, source‑code review, reverse engineering.

Required skills

• Python, C#, C/C++, Rust, Nim
• Linux and Windows OS internals
• Network protocols and cloud security
• Red‑team assessments, EDR evasion, payload development, lateral movement, privilege escalation
• Web application, mobile and wireless security testing
• Scripting and tool development
• Threat‑intelligence analysis, incident response, source‑code review, reverse engineering