VAPT & Penetration Testing Specialist

BAE Systems; Qatar; On-site; QAR 60,000 - 90,000; Full time

Job summary

BAE Systems is seeking a senior Vulnerability Assessment and Penetration Testing professional to conduct comprehensive VAPT across enterprise IT environments, including networks, applications, and cloud platforms. The role involves manual validation, controlled exploitation, and detailed reporting of findings with remediation guidance.

The candidate will work with security teams to identify attack vectors, perform retesting after remediation, and follow established methodologies and best

Qualifications

• The candidate should have hands-on experience in conducting VAPT across enterprise IT environments, applications and networks.
• Experience validating vulnerabilities and false positives through manual techniques.

Responsibilities

• Conduct internal and external penetration testing across networks, servers, firewalls, endpoints and infrastructure.
• Perform web application and API penetration testing, including testing against OWASP vulnerabilities.
• Conduct vulnerability assessments and manually validate identified vulnerabilities and false positives.
• Perform controlled exploitation to determine the actual impact and severity of identified security weaknesses.
• Conduct security testing of network devices, firewalls, routers, switches, VPNs, load balancers and servers.
• Perform application security testing covering authentication, authorization, session management, input validation, encryption and business-logic vulnerabilities.
• Conduct source-code security reviews and support SAST/DAST activities.
• Assess security of cloud environments and operating systems.
• Perform security assessments using tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark and Kali Linux.
• Develop or automate penetration-testing/security activities using Python.
• Prepare detailed penetration-testing and vulnerability-assessment reports containing evidence, risk ratings, business impact and remediation recommendations.
• Work with technical teams to remediate identified vulnerabilities.
• Conduct retesting and validation after remediation.
• Follow established penetration-testing methodologies and cybersecurity best practices.
• Support security teams in identifying attack vectors and improving the organization’s overall security posture.

Skills

VAPT

Network Pentesting

Web App Pentesting

API Security Testing

Cloud Security

SAST/DAST

Code Security Analysis

Secure Coding

Python Automation

OWASP Top 10

Exploitation & Validation

Tools

Burp Suite

Nmap

Nessus

Metasploit

Wireshark

Kali Linux

Job description

BAE Systems is seeking a senior Vulnerability Assessment and Penetration Testing professional to conduct comprehensive VAPT across enterprise IT environments, including networks, applications, and cloud platforms. The role involves manual validation, controlled exploitation, and detailed reporting of findings with remediation guidance.

The candidate will work with security teams to identify attack vectors, perform retesting after remediation, and follow established methodologies and best