VAPT & Penetration Testing Security Analyst

BSL; Al Rayyan; On-site; QAR 180,000 - 300,000; Full time

Job summary

BSL in Qatar is seeking a cybersecurity specialist to lead VAPT across enterprise IT environments, including apps, networks, and cloud. The role involves manual validation of findings, exploitation to assess impact, and reporting with remediation guidance.

You will work with engineers to remediate vulnerabilities and re-test to ensure risk reduction. The candidate will leverage tools like Burp Suite, Nmap, Nessus, Metasploit, and Kali Linux, and apply OWASP Top 10 and ISO security practices to

Qualifications

• Proficient in performing VAPT across networks, apps, and cloud environments.
• Demonstrated ability to validate vulnerabilities and false positives manually.
• Experience with OWASP Top 10 and secure coding practices.

Responsibilities

• Conduct internal and external penetration testing across networks, servers, and infrastructure.
• Perform web application and API testing against OWASP threats and best practices.
• Develop reports with evidence, risk ratings, business impact, and remediation steps.
• Collaborate with IT teams to remediate findings and retest after fixes.
• Automate testing activities using Python and standard security tools.

Skills

VAPT

Network Penetration Testing

Web Application Penetration Testing

API Security Testing

Infrastructure Security Testing

Cloud Security Testing

Vulnerability Exploitation & Valid

OWASP Top 10

SAST & DAST

Source-Code Security Analysis

Secure Coding Practices

Network & OS Security

Python/Security Automation

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

Kali Linux

Job description

BSL in Qatar is seeking a cybersecurity specialist to lead VAPT across enterprise IT environments, including apps, networks, and cloud. The role involves manual validation of findings, exploitation to assess impact, and reporting with remediation guidance.

You will work with engineers to remediate vulnerabilities and re-test to ensure risk reduction. The candidate will leverage tools like Burp Suite, Nmap, Nessus, Metasploit, and Kali Linux, and apply OWASP Top 10 and ISO security practices to