Penetration Testing Specialist

Omer Bin Abdul-Aziz Al-Marwani Auditing & Accounting; Doha; On-site; QAR 80,000 - 120,000; Full time

Job summary

Omer Bin Abdul-Aziz Al-Marwani Auditing & Accounting is seeking a skilled Penetration Testing Specialist to strengthen client cybersecurity postures. You will simulate real-world attacks, identify vulnerabilities, and translate findings into actionable guidance for leadership.

Responsibilities include testing across web, mobile, networks, and cloud; vulnerability management; and producing executive reports. Certifications and audit/consulting experience are valued assets.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 2 to 5 years of hands‑on experience in penetration testing and ethical hacking (experience in audit, consulting, or professional services firms is a strong plus).
• OSCP, eJPT/eWPT, CEH, or CISA/CRISC certifications are highly desirable.

Responsibilities

• Penetration Testing & Assessments: Execute comprehensive internal/external penetration tests across web applications, mobile apps, network infrastructure, and cloud environments for clients.
• Vulnerability Management: Perform routine vulnerability scans, validate identified risks, and evaluate their potential operational and business impact.
• Report Writing & Consultation: Draft clear, detailed technical and executive reports outlining vulnerabilities, risk levels, and prioritized remediation strategies.
• IT Audit Collaboration: Partner with the IT Audit team to evaluate the effectiveness of IT general controls (ITGC), access management, and data protection frameworks.
• Social Engineering: Design and execute simulated phishing and social engineering campaigns to test security awareness across client organizations.
• Client Presentation: Communicate complex technical findings effectively to both technical teams and senior management/audit committees.

Skills

Penetration testing

Ethical hacking

Threat modeling

Security auditing

Education

Bachelor's degree in Cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Nessus

Job description

We are seeking a highly skilled and proactive Penetration Testing Specialist to join our Risk Advisory & IT Audit team. In this role, you will play a critical part in assessing and strengthening our clients’ cybersecurity posture. You will simulate real-world cyberattacks across systems, networks, and applications to identify security vulnerabilities before they can be exploited, translating technical findings into actionable business insights for client leadership.

Key Responsibilities

• Penetration Testing & Assessments: Execute comprehensive internal/external penetration tests across web applications, mobile apps, network infrastructure, and cloud environments for clients.
• Vulnerability Management: Perform routine vulnerability scans, validate identified risks, and evaluate their potential operational and business impact.
• Report Writing & Consultation: Draft clear, detailed technical and executive reports outlining vulnerabilities, risk levels, and prioritized remediation strategies.
• IT Audit Collaboration: Partner with the IT Audit team to evaluate the effectiveness of IT general controls (ITGC), access management, and data protection frameworks.
• Social Engineering: Design and execute simulated phishing and social engineering campaigns to test security awareness across client organizations.
• Client Presentation: Communicate complex technical findings effectively to both technical teams and senior management/audit committees.

Qualifications & Requirements

• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Experience: 2 to 5 years of hands‑on experience in penetration testing and ethical hacking (experience in audit, consulting, or professional services firms is a strong plus).
• Certifications (At least one is highly desirable):
  • OSCP (Offensive Security Certified Professional)
  • eJPT / eWPT (eLearnSecurity)
  • CEH (Certified Ethical Hacker)
  • CISA / CRISC (A plus for integrated IT audit and risk knowledge)

Technical Skills

• Proficiency with industry-standard testing tools (e.g., Burp Suite, Metasploit, Nmap, Wireshark, Nessus).
• Deep understanding of OS (Linux/Windows), network protocols, web architecture, and OWASP Top 10.
• Familiarity with cybersecurity standards and compliance frameworks (e.g., ISO 27001, NIST, PCI-DSS).