Penetration Tester | MACH Consultants | Qatar

Mach Consultants; Qatar; On-site; QAR 60,000 - 120,000; Full time

Job summary

MACH Consultants is seeking an experienced Penetration Tester in Qatar to lead offensive security assessments across web apps, APIs, networks, wireless, and cloud environments. You will perform vulnerability assessments, simulate advanced cyber attacks, and deliver risk-based reports with actionable remediation guidance.

Ideal candidates have 5+ years of hands-on security testing, proficiency with Burp Suite, Metasploit, Nmap, and Kali Linux, and familiarity with OWASP Top 10 and MITRE ATT&CK.

Qualifications

• 5+ years of offensive security, ethical hacking, and penetration testing experience.
• Strong web application, API, and network security testing proficiency.
• Deep practical mastery of Burp Suite, Metasploit, Nmap, and Kali Linux.
• Familiarity with OWASP Top 10, MITRE ATT&CK frameworks; threat modelling experience.

Responsibilities

• Plan, execute, and report on comprehensive penetration tests across web apps, APIs, networks, wireless, and cloud.
• Use industry-standard offensive security tools (Burp Suite, Metasploit, Nmap, Nessus, Wireshark, Kali Linux).
• Assess enterprise apps/infrastructure against OWASP Top 10 and MITRE ATT&CK.
• Perform vulnerability assessments, source code reviews, and threat modelling.
• Conduct network, wireless, and cloud pentesting to find misconfigurations.
• Collaborate with developers, security engineers, and IT leadership to discuss findings.
• Author risk-based penetration testing reports with remediation recommendations.
• Develop exploit scripts and automation utilities (Python, Bash, PowerShell).
• Maintain documentation, vulnerability registers, and knowledge bases.
• Stay updated on zero-days and attack vectors.

Skills

Burp Suite

Metasploit

Nmap

Kali Linux

OWASP Top 10

MITRE ATT&CK

Python

Bash

PowerShell

Threat modelling

Education

Bachelor’s or Master’s degree in Computer Science/Cybersecurity

Tools

Nessus

Wireshark

Kali Linux

Burp Suite

Metasploit

Nmap

Job description

Position Summary

MACH Consultants is seeking an experienced, highly technical, and accomplished Penetration Tester with 5+ years of ethical hacking, vulnerability assessment, and offensive security experience to join our client team on a full-time, permanent basis in Qatar. In this specialized offensive security role, you will spearhead conducting comprehensive penetration tests across web applications, APIs, network infrastructure, wireless networks, and cloud environments. You will work closely with development squads, security architects, and IT leadership to identify security vulnerabilities and provide actionable remediation guidance. Ideal candidates bring a robust academic degree in cybersecurity or computer science, deep practical mastery of Burp Suite, Metasploit, Nmap, Kali Linux, OWASP Top 10, and immediate availability for deployment in Qatar.

Detailed Job Description

As a Penetration Tester at MACH Consultants in Qatar, you will take full ownership of executing offensive security assessments, simulating advanced cyber attacks, and validating enterprise defenses. Your day-to-day responsibilities encompass performing vulnerability assessments and penetration testing on web applications, APIs, networks, wireless systems, and cloud architectures, utilizing tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and Kali Linux. You will evaluate security postures against the OWASP Top 10 and MITRE ATT&CK frameworks, conduct threat modelling and secure coding reviews, and author risk-based reporting with actionable remediation recommendations. Working in a fast-paced technology consulting environment in Qatar, you will drive proactive vulnerability discovery and security posture hardening.

Key Responsibilities

• Plan, execute, and report on comprehensive penetration tests across web applications, APIs, networks, wireless, and cloud environments.
• Utilize industry-standard offensive security tools including Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and Kali Linux.
• Evaluate enterprise applications and infrastructure against the OWASP Top 10 and MITRE ATT&CK threat frameworks.
• Perform vulnerability assessments, source code reviews, and threat modelling to identify security flaws proactively.
• Conduct network, wireless, and cloud penetration testing to uncover misconfigurations and perimeter weaknesses.
• Collaborate proactively with software developers, security engineers, and IT leadership to discuss vulnerability findings.
• Author comprehensive, risk-based penetration testing reports with clear technical remediation recommendations.
• Develop custom exploit scripts and automation utilities utilizing Python, Bash, or PowerShell.
• Maintain technical documentation, vulnerability tracking registers, and ethical hacking knowledge bases.
• Stay abreast of emerging zero-day exploits, attack vectors, and offensive security techniques.

Required Qualifications & Skills

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Minimum 5+ years of professional working experience in offensive security, ethical hacking, and penetration testing.
• Strong technical proficiency in web application security testing, API security, and network penetration testing.
• Deep practical expertise using offensive security toolkits (Burp Suite, Metasploit, Nmap, Nessus, Kali Linux).
• Solid understanding of the OWASP Top 10, MITRE ATT&CK framework, threat modelling, and secure coding practices.
• Strong analytical problem-solving capabilities and excellent technical report writing and presentation skills.
• Professional availability for full-time employment in Qatar (Application email: [e-mail]).

Nice-to-Have Skills

• Industry-recognized offensive security certifications such as OSCP, CEH, GPEN, OSCE, or CREST registered tester.
• Hands-on experience performing red team operations, social engineering assessments, and container escape testing.
• Prior working experience in cybersecurity consulting firms, red teams, or enterprise security assessment units.
• Advanced programming proficiency in Python, Bash, or PowerShell for exploit development.
• Bilingual proficiency in Arabic and English.

Application Information

• Recruiter: MACH Consultants Talent Acquisition Team
• Contact Name: Srujita Akula (Talent Acquisition)
• Email: [e-mail]
• Phone: Unspecified
• Application URL: Unspecified
• Salary/Rate: Competitive and commensurate with experience
• Deadline: Open until filled
• Notice Period: Immediate to short notice preferred
• Contract Duration: Permanent / Full-Time (Qatar)

Recruitment Pro Tip

When applying for penetration testing roles, ensure your resume explicitly highlights your OSCP/GPEN certification status, web/API hacking portfolio, and sample vulnerability report clarity.