Security Analyst – VAPT & Penetration Testing

BSL; Qatar; On-site; QAR 291,000 - 437,000; Full time

Job summary

BSL seeks a senior security professional to perform comprehensive vulnerability assessment and penetration testing across enterprise IT environments, applications, networks, infrastructure, and cloud platforms in Qatar.

You will execute internal/external penetration testing, assess OWASP risks, perform manual validation, and report findings with actionable remediation guidance to strengthen the organization’s security posture.

Qualifications

• Proficient in vulnerability assessment and penetration testing methodologies.
• Experience conducting internal and external pentests across networks, apps and infrastructure.
• Ability to assess OWASP Top 10 risks and validate findings with evidence.

Responsibilities

• Conduct internal and external penetration testing across networks, servers, firewalls, endpoints and infrastructure.
• Perform web application and API penetration testing, including OWASP testing.
• Manually validate vulnerabilities and false positives; provide remediation guidance.

Skills

VAPT

Network Pentest

Web App Pentest

API Security

Cloud Security

SAST/DAST

Python/Automation

Burp Suite

Nessus

Metasploit

Kali Linux

Nmap

Wireshark

OS Security

Tools

Burp Suite

Nessus

Metasploit

Kali Linux

Wireshark

Nmap

Job description

The candidate will be responsible for conducting comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across enterprise IT environments, applications, networks, infrastructure, cloud platforms and security systems.

Key Responsibilities

• Conduct internal and external penetration testing across networks, servers, firewalls, endpoints and infrastructure.
• Perform web application and API penetration testing, including testing against OWASP vulnerabilities.
• Conduct vulnerability assessments and manually validate identified vulnerabilities and false positives.
• Perform controlled exploitation to determine the actual impact and severity of identified security weaknesses.
• Conduct security testing of network devices, firewalls, routers, switches, VPNs, load balancers and servers.
• Perform application security testing covering authentication, authorization, session management, input validation, encryption and business-logic vulnerabilities.
• Conduct source-code security reviews and support SAST/DAST activities.
• Assess security of cloud environments and operating systems.
• Perform security assessments using tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark and Kali Linux.
• Develop or automate penetration-testing/security activities using Python.
• Prepare detailed penetration-testing and vulnerability-assessment reports containing evidence, risk ratings, business impact and remediation recommendations.
• Work with technical teams to remediate identified vulnerabilities.
• Conduct retesting and validation after remediation.
• Follow established penetration-testing methodologies and cybersecurity best practices.
• Support security teams in identifying attack vectors and improving the organization's overall security posture.

Required Technical Skills

• Vulnerability Assessment & Penetration Testing (VAPT)
• Network Penetration Testing
• Web Application Penetration Testing
• API Security Testing
• Infrastructure Security Testing
• Cloud Security Testing
• Vulnerability Exploitation & Validation
• OWASP Top 10
• SAST & DAST
• Source-Code Security Analysis
• Secure Coding Practices
• Network & Operating System Security
• Python/Security Automation
• Burp Suite
• Nmap
• Nessus
• Metasploit
• Wireshark
• Kali Linux

Requirements

Standards / Framework Knowledge

• OWASP
• NIST
• ISO/IEC 27001
• PCI DSS
• Penetration-testing methodologies and security best practices