Offensive Security Engineer – Penetration Testing & Red Team

About the role

Arab Bank is seeking an Offensive Security Engineer to proactively uncover and exploit vulnerabilities across its digital ecosystem. You will lead advanced penetration tests, red‑team simulations, and security assessments to strengthen the bank’s products and protect customer data.

Key responsibilities

• Design and execute advanced threat simulations, penetration tests, and red‑team exercises covering web, mobile, API, cloud, and network assets.
• Perform white‑box security testing, including code reviews, fuzzing, and reverse engineering.
• Develop proof‑of‑concept exploits and custom security tooling.
• Collaborate with engineering, DevSecOps, SOC, and risk teams to remediate findings and improve security controls.
• Lead triage of vulnerabilities reported by third‑party vendors and guide remediation processes.

Required profile

• Bachelor’s or master’s degree in Computer Science, Information Security, or related field.
• 2‑5 years of hands‑on experience in offensive security, penetration testing, or red‑team operations.
• Relevant certifications such as OSWE, OSCE, OSCP, GXPN, GMOB, or CRTO.

Required skills

• Advanced penetration testing of web applications, mobile apps (iOS/Android), APIs, and cloud environments (AWS, GCP, Azure).
• Experience developing security tools and exploits using languages such as Python, Go, Java, JavaScript, PHP, C/C++.
• Proficiency in manual source‑code review, fuzzing, reverse engineering, and use of tools like CodeQL.
• Knowledge of security standards and frameworks: OWASP Top 10, ASVS, MITRE ATT&CK.
• Ability to emulate adversary tactics, techniques, and procedures (TTPs) and evade security controls.