Join Our Elite Team of Cybersecurity Professionals

Hiring a skilled Security Assessor / Windows Security Researcher in Dubai, UAE, with strong expertise in Windows security, reverse engineering, malware analysis, and endpoint security research.

The ideal candidate will have hands-on experience in Windows development, low-level system programming, and vulnerability research, with the ability to analyze complex security threats and identify vulnerabilities in Windows-based environments.

Key Responsibilities

• Conduct security assessments, vulnerability analysis, and research on Windows-based systems and applications.
• Perform reverse engineering, binary analysis, and malware analysis to identify security vulnerabilities.
• Analyze Windows internals, system processes, APIs, and low-level components.
• Research endpoint security threats, attack techniques, and potential vulnerabilities.
• Perform low-level security testing and support the development of security research methodologies.
• Document technical findings and provide actionable remediation recommendations.

Required Skills & Expertise

• Strong Windows development experience using C/C++, C#, and Windows API (WinAPI).
• Hands-on experience with reverse engineering tools, including Ghidra, IDA Pro, and Binwalk.
• Proficiency in assembly language, C programming, and binary analysis.
• In-depth knowledge of Windows internals, malware analysis, and vulnerability research.
• Experience in endpoint security research and low-level system development.
• Strong analytical, troubleshooting, and technical documentation skills.

Certifications

• OSCP (Offensive Security Certified Professional) or OSEP (Offensive Security Experienced Penetration Tester) certification, preferably recently obtained.

• Encourage ‘Shift Left’ Mindset - Proactively embed security requirements, by influencing implementation of security
  & privacy patterns from the start of the development cycle.
• Implement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers, Testers,
  Engineers & others to include security patterns into features, epics, and stories to build secure, innovative & superior
  digital products for customers and employees.
• Assessments – Possess extensive knowledge and firsthand experience in assessing the security of Web Applications,
  Mobile Applications, Thick Client Applications, Progressive Web Applications, Containers and Containerization
  Technology, Public Clouds, Windows and Linux Operating Systems, well-known enterprise grade databases to
  identify vulnerabilities and recommend remediation measures. This role requires a strong understanding of security
  core concepts and deep understanding of how the vulnerabilities work.
• Key Skills –Web Application Security, Mobile application security, Security Code review, API security, thick client
  security, Underlying infrastructure security, Integration Security, Database Security, Secure Configuration Review,
  Container Security, CI/CD Pipeline Security, AI model security testing, Cloud security.
• Tools and Technologies – Burp Suite, Postman / Insomnia, Tenable Nessus, Checkmarx One, GitHub, Sysdig,
  Semgrep, Nuclei, MobSF, Appknox, Frida, Objection Framework, Kubernetes, Docker, Jenkins, containerd, podman,
  GitHub, OpenShift and good knowledge about monolithic and microservice architecture and pipeline driven security.