Senior Cyber Security Analyst

About the Role

As a Senior Cyber Security Analyst within the Continuous Security Testing department, you will conduct hands-on penetration testing and vulnerability assessments to identify security weaknesses and help reduce cyber risk across the technology environment. Your scope will include external black-box testing, Microsoft Azure and Google Cloud Platform (GCP), internal infrastructure and Active Directory, Wi-Fi networks, operational technology (OT), kiosks, servers, and network devices. You will communicate findings clearly, recommend practical remediation, and validate corrective actions in collaboration with technology and business stakeholders.

Your duties will include:

• Plan and deliver authorised security assessments in accordance with agreed scope, rules of engagement, and testing schedules.
• Document validated findings, assess business impact, and recommend actionable, risk-prioritised remediation to technical and non-technical stakeholders.
• Coordinate assessment activities with system owners, safeguard assessment evidence, and support security and compliance reporting through established procedures.

Continuous Security Testing

• Conduct external black-box penetration testing of internet-facing assets and internal penetration testing, including controlled Active Directory exploitation, to identify and validate weaknesses and demonstrate their impact within the approved scope.
• Perform cloud penetration testing and security assessments across Microsoft Azure and GCP environments, covering cloud infrastructure, configurations, and access controls.
• Assess Wi-Fi configurations, authentication, access controls, and network segregation, and evaluate kiosk configurations, access restrictions, and exposure to unauthorised access, recommending appropriate corrective measures.
• Conduct security and vulnerability assessments of in-scope OT systems, including SCADA, Mitsubishi, and Siemens environments, using approved methods that prioritise operational safety and availability.
• Assess vulnerabilities across active on-premises servers, cloud infrastructure, external IP addresses, network devices, and approved OT networks; use Tenable VM to plan and execute scans, review coverage, and analyse results, with manual validation where appropriate to reduce false positives.
• Prioritise vulnerabilities by severity, asset criticality, exposure, and business impact; agree practical remediation actions with asset owners, track progress, perform retesting, and document closure evidence or remaining risk in accordance with established procedures.
• Maintain assessment plans and testing records for consistent coverage and use Kali Linux and approved security testing tools to deliver repeatable assessments within agreed authorisation and operational constraints.
• Produce clear technical reports and management summaries covering assessment scope, evidence, business impact, and remediation recommendations.
• Continuously improve testing practices, reporting quality, and assessment efficiency, and share relevant technical knowledge with the team.

Be part of an extraordinary story

Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make. You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future and build the life you want while being part of an international community. Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before. Together, everything is possible.

Qualification

We are looking for a passionate and experienced cyber security professional to join our Continuous Security Testing department. The ideal candidate will have the following qualifications and experience:

Essential

• Bachelor’s degree in cyber security, information technology, computer science, or a related field, with a minimum of 4 years of job-related experience.
• Penetration Testing Experience:
  • Practical experience conducting external black-box and internal infrastructure penetration testing.
  • Hands-on experience assessing Active Directory security and validating weaknesses through authorised testing.
  • Experience conducting cloud security assessments and penetration testing in Microsoft Azure and GCP environments.
• Vulnerability Assessment and Tools:
  • Hands-on experience using Tenable VM for vulnerability scanning, results analysis, and remediation tracking.
  • Proficiency with Kali Linux and security testing tools for infrastructure and network assessments.
  • Experience assessing servers, network devices, external IP addresses, and cloud infrastructure, including manual validation and retesting.
• Assessment Delivery and Reporting:
  • Experience defining assessment scope, following rules of engagement, and coordinating testing with system owners.
  • Ability to produce evidence-based technical reports, explain business impact, and recommend practical remediation.
  • Experience prioritising findings and validating remediation in collaboration with infrastructure, network, and cloud teams.

Preferred

• Experience with aviation cyber security frameworks and security assessments across large, geographically dispersed technology environments.
• Hands-on OT assessment experience involving SCADA, Mitsubishi, or Siemens systems.
• One or more of the following certifications:
  1. OffSec Certified Professional (OSCP / OSCP+)
  2. OffSec Experienced Penetration Tester (OSEP)
  3. Certified Red Team Operator (CRTO)
  4. Certified Red Team Lead (CRTL)
  5. Certified Azure Red Team Professional (CARTP)

Job-Specific Skills

Essential

• Strong technical knowledge of network security, Windows and Linux systems, Active Directory, and cloud security in Azure and GCP.
• Ability to select appropriate testing methods, validate findings, and assess risk without exceeding the authorised scope.
• Practical proficiency with Tenable VM and Kali Linux for vulnerability assessment and penetration testing.
• Understanding of wireless security, kiosk restrictions, infrastructure hardening, and OT assessment considerations.
• Strong analytical judgement, attention to detail, and ability to prioritise findings based on technical severity and business impact.
• Clear written and verbal communication, effective stakeholder coordination, and disciplined handling of confidential assessment information.

General Information

• Ref #: 237034
• Location: Qatar-Doha
• Job family: Corporate & Commercial
• Closing Date: 2026-11-11