VAPT & Penetration Testing Specialist

BAE Systems Strategic Aerospace Services WLL; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

BAE Systems Strategic Aerospace Services WLL in Doha seeks a Security Analyst specializing in VAPT and penetration testing to assess enterprise IT environments, applications, networks, and cloud platforms.

You will conduct internal and external penetration tests, evaluate web applications and APIs, review code security, and prepare detailed reports with risk ratings and remediation guidance for technical teams.

Responsibilities

• Conduct internal and external penetration testing across networks, servers, and infrastructure.
• Perform web application and API penetration testing, including testing against OWASP vulnerabilities.
• Conduct vulnerability assessments and validate findings.
• Perform controlled exploitation to assess impact and severity of security weaknesses.
• Test security of network devices, firewalls, routers, switches, VPNs, load balancers and servers.
• Assess application security including authentication, authorization, session management, input validation and encryption.
• Review source code security and support SAST/DAST.
• Assess security of cloud environments and operating systems.
• Develop or automate testing activities using Python.
• Prepare detailed reports with evidence, risk ratings and remediation recommendations.
• Collaborate with teams to remediate vulnerabilities and perform retesting.
• Follow established testing methodologies and best practices.
• Support security teams to identify attack vectors and improve posture.

Skills

VAPT

Penetration Testing

Web App Security

API Security

Cloud Security

Security Automation

Python Scripting

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

Kali Linux

Job description

BAE Systems Strategic Aerospace Services WLL in Doha seeks a Security Analyst specializing in VAPT and penetration testing to assess enterprise IT environments, applications, networks, and cloud platforms.

You will conduct internal and external penetration tests, evaluate web applications and APIs, review code security, and prepare detailed reports with risk ratings and remediation guidance for technical teams.