Security Analyst - VAPT & Penetration Testing
BAE Systems
The candidate will be responsible for conducting comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across enterprise IT environments, applications, networks, infrastructure, cloud platforms and security systems.
Key Responsibilities
- Conduct internal and external penetration testing across networks, servers, firewalls, endpoints and infrastructure.
- Perform web application and API penetration testing , including testing against OWASP vulnerabilities.
- Conduct vulnerability assessments and manually validate identified vulnerabilities and false positives.
- Perform controlled exploitation to determine the actual impact and severity of identified security weaknesses.
- Conduct security testing of network devices, firewalls, routers, switches, VPNs, load balancers and servers .
- Perform application security testing covering authentication, authorization, session management, input validation, encryption and business-logic vulnerabilities.
- Conduct source-code security reviews and support SAST/DAST activities.
- Assess security of cloud environments and operating systems .
- Perform security assessments using tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark and Kali Linux .
- Develop or automate penetration-testing/security activities using Python .
- Prepare detailed penetration-testing and vulnerability-assessment reports containing evidence, risk ratings, business impact and remediation recommendations.
- Work with technical teams to remediate identified vulnerabilities.
- Conduct retesting and validation after remediation.
- Follow established penetration-testing methodologies and cybersecurity best practices.
- Support security teams in identifying attack vectors and improving the organization’s overall security posture.
Required Technical Skills
Strong hands-on knowledge of:
- Vulnerability Assessment & Penetration Testing (VAPT)
- Network Penetration Testing
- Web Application Penetration Testing
- API Security Testing
- Infrastructure Security Testing
- Cloud Security Testing
- Vulnerability Exploitation & Validation
- OWASP Top 10
- SAST & DAST
- Source-Code Security Analysis
- Secure Coding Practices
- Network & Operating System Security
- Python/Security Automation
- Burp Suite
- Nmap
- Nessus
- Metasploit
- Wireshark
- Kali Linux
Requirements
Standards / Framework Knowledge
The candidate should have good knowledge of relevant cybersecurity standards and methodologies, including:
- OWASP
- NIST
- ISO/IEC 27001
- PCI DSS
- Penetration-testing methodologies and security best practices
Vacancy posted 3 days ago
Similar jobs that could be interesting for youBased on the Security Analyst - VAPT & Penetration Testing in Doha vacancy
- ...BAE Systems Strategic Aerospace Services WLL | Full time Security Analyst – VAPT & Penetration Testing The candidate will be responsible for conducting comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across enterprise IT environments, applications...
BAE Systems Strategic Aerospace Services WLL
Doha3 days ago - ...BAE Systems Strategic Aerospace Services WLL in Doha seeks a Security Analyst specializing in VAPT and penetration testing to assess enterprise IT environments, applications, networks, and cloud platforms. You will conduct internal and external penetration tests, evaluate...
BAE Systems Strategic Aerospace Services WLL
Doha3 days ago - ...BAE Systems is seeking a seasoned VAPT specialist to conduct comprehensive penetration testing and vulnerability assessments across enterprise networks, cloud platforms... ..., perform controlled exploits, and help remediate security weaknesses with a structured reporting approach....
BAE Systems
Doha3 days ago - ...Position: Data & Testing Analyst Location: Qatar Contract Duration: 6 Months Candidate Requirement: Only candidates currently available in Qatar Job Requirements ~4–7 years of experience in data migration, reporting, or ERP testing activities ....
- ...Department CORPORATE SECURITY Primary Purpose of the Job Lead and implement QatarEnergy Corporate Security Program and management systems, lead assurance, standardization of security operations for commercial, industrial, international assets. Monitor geopolitical...
- ...Department CORPORATE SECURITY Primary Purpose of the Job Lead QatarEnergy International Security Program, inclusive of the Policies , Procedures and Management Systems. Assess and mitigate security risks associated with International Security Program ensuring...
$21600 per hour
...Vulnerability & Risk Analyst Job Title: Vulnerability and Risk Analyst Domain: Technical Risk Management... ...vulnerability management, risk assessment, data analysis, security tooling, OSINT, and moderate penetration testing capabilities, with a broad understanding of...- ...We are seeking an experienced and highly motivated System Test Manager to lead our testing team and ensure the delivery of high-quality software products. The ideal candidate will plan, coordinate, and oversee all testing activities, define effective test strategies...
- ...Maintain the confidentiality, integrity, and availability of metering data in accordance with corporate governance and information security standards. Perform any other duties and responsibilities assigned by the immediate supervisor to support departmental and...
- ...Job Overview An established organization is seeking an experienced Security Supervisor to oversee security personnel and ensure the effective delivery of security operations across commercial facilities. Key Responsibilities Supervise security officers during...
- ...established financial organisation is seeking a Financial Systems Analyst to support and enhance mission-critical enterprise applications... ...with vendors and internal stakeholders. Perform application testing and quality assurance. Produce technical documentation and...
- ...Role Purpose The Test & Commissioning Manager is responsible for planning, managing, and executing testing and commissioning activities for smart city software platforms and associated field hardware deployments. This role leads internal testers and external...
- ...’s most sought-after lifestyle and leisure hubs. Job Description We are seeking a detail-oriented and professional HSE Security Officer to join our team in Lusail, Qatar. In this role, you will be responsible for maintaining a safe, secure, and compliant work...
- ...Description Analyze application architecture, business requirements, and production usage patterns to define appropriate performance testing strategies and workload models . Design and execute baseline, load, stress, spike, endurance, and scalability tests ....
- ...About the Role Our client is seeking a SCADA Cyber Security Engineer to support the secure operation of critical operational technology (OT) environments across a major infrastructure network. The role will focus on cyber security, industrial communications, network...
- ...SGS is the world’s leading Testing, Inspection and Certification company. We operate a network of over 2,500 laboratories and business facilities across 115 countries, supported by a team of 99,500 dedicated professionals. With over 145 years of service excellence,...
$45000 per hour
...date 11. Work with departments or consultant to ensure annual testing of operating effectiveness of internal controls is performed... ...instructions and controls so that NAKILAT provides a safe, world class, secure and environmentally responsible service to customers, the...- Role Summary: Responsible for analyzing operational data to ensure accuracy, support reporting, and drive performance improvements. Key Responsibilities: Analyze and validate large datasets for accuracy and completeness Develop dashboards and performance...
- ...Avanceon Office is looking for Testing & Comissioning Engineer who can work on multi year contract basis. We are offering a unique opportunity for engineers looking to broaden their scope and work with some of the biggest manufacturers in the world in a variety of segments...
- Overview Responsible for providing an independent and objective assessment/analysis of projects in PEPS. Identify challenges and risks and provide analysis and confidence that projects will deliver to their sanctioned commitments, schedule, and cost. Provide recommendation...
- ...Testing & Commissioning Engineer – Substation Automation Systems (SAS) Location: Doha, Qatar Job Family: Engineering & Commissioning... ..., including managed switches, firewalls, VLANs, routing, and secure remote access solutions. Implement and verify industrial...
- To support the IT Department in managing sourcing, tendering, and contract administration activities for technology systems, software, and digital services in alignment with Qatar Government procurement laws and the Authority’s internal policies. Requirements KEY...
- Department CORPORATE FINANCE & CONTROLS Primary Purpose of the Job Act as a Front Office Treasurer, responsible for communication with both External counterparties such as Banks, and QatarEnergy Subsidiaries and Affiliate companies, as well as Internal Counterparties...
- ...Job Description – Switchgear Testing & Commissioning Engineer Position: Switchgear Testing & Commissioning Engineer Location: Doha, Qatar Employment Type: Contract (1 Year – Extendable) Job Purpose The Switchgear Testing & Commissioning Engineer...
- ...URgent : Enterprise Security Expert for Qatar Full-time VAM Systems is a Business Consulting, IT Solutions and Services company... ...and design. ~ Experience should include security network penetration testing, application vulnerability assessments, risk analysis and...
VAM Systems Inc
Doha2 days ago QAR 6000 - 7500 per month
...: QAR 6,000 – QAR 7,500 per month Job Type: Full-Time Job Overview IIQAF Group is seeking a vigilant and professional Security Guard in Doha to ensure the safety and security of our hospitality facilities. The ideal candidate will have experience in patrolling...- ...Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. Our client is seeking a Technical Analyst to support the ICT Infrastructure function by coordinating infrastructure operations and projects, maintaining documentation,...
- We are looking for a skilled ICT Governance & Change Management Specialist to lead and govern the technology change management lifecycle. The role ensures that all technology changes are implemented in a controlled, compliant, and business-aligned manner, minimizing risk...
- ...A GRC Senior Analyst / Specialist supports the governance, risk, and compliance framework to ensure alignment with national cyber regulations, security policies and government assurance standards. The role focuses on identifying, assessing and managing cyber and information...
- ...or other governance and risk management certifications. Technical Skills: Strong knowledge of cybersecurity and information security standards (ISO 27001, NIA, COBIT, Common Criteria, etc.). Understanding of accreditation and certification frameworks (ISO 1702...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Security Analyst - VAPT & Penetration Testing. Be the first to apply!
