About Role

This is a hands-on technical cyber security role that requires knowledge of technical and organizational controls. Responsibilities include conducting vulnerability assessments, penetration testing, application security assessments and cloud security testing to help ensure Qatar Airways’ cyber security.

Responsibilities

• Conduct regular vulnerability scans of systems and applications by using industry leading offensive security tools and methodologies to detect security issues.
• Analyze vulnerability scan results and prioritize remediation efforts using standard risk assessment methodologies to ensure operationally feasible vulnerability closure.
• Conduct penetration tests to identify security weaknesses using leading offensive techniques to test systems for security vulnerabilities.
• Develop and execute penetration testing plans using an agreed calendar of events to ensure that systems and applications are adequately covered during the tests.
• Report penetration testing findings to management by presenting them in a readable format to ascertain the risk to the organization.
• Simulate advanced persistent threats via red teaming exercises to test security defenses using leading offensive methods to identify and exploit security weaknesses and provide recommendations to improve security posture.
• Perform other department duties related to his / her position as directed by the Head of the Department

Qualifications Knowledge Skills and Experience

• High School Qualification / Vocational Qualification /Diploma or Equivalent (Type of Diploma Based on Role) with Minimum 5 years of job-related experience OR Bachelor’s Degree or Equivalent with Minimum 4 years of job related experience.
• Penetration Testing for infrastructure and applications within the organizations
• Red Teaming to identify weaknesses in the organization’s products and/or processes
• Vulnerability Scanning to ensure compliance with security standards Security Auditing of configurations and/or systems
• Advanced capabilities on Application Security and technologies thereof
• Advanced capabilities on Network Security and technologies there of
• Cloud Security
• Infrastructure and application penetration testing

Preferred

• SANS GIAC Certified Web Application Defender (GWEB)
• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• GIAC Penetration Tester (GPEN)