Senior Cyber Security Analyst

Description

About the Role

As a Senior Cyber Security Analyst within the Continuous Security Testing department, you will conduct hands-on penetration testing and vulnerability assessments to identify security weaknesses and help reduce cyber risk across Qatar Airways’ technology environment. Your scope will include external black-box testing, Microsoft Azure and Google Cloud Platform (GCP), internal infrastructure and Active Directory, Wi-Fi networks, operational technology (OT), kiosks, servers and network devices. You will communicate findings clearly, recommend practical remediation and validate corrective actions in collaboration with technology and business stakeholders.

Your duties will include:

• Plan and deliver authorised security assessments in accordance with agreed scope, rules of engagement and testing schedules.

• Document validated findings, assess business impact and recommend actionable, risk-prioritised remediation to technical and non-technical stakeholders.

• Coordinate assessment activities with system owners, safeguard assessment evidence and support security and compliance reporting through established procedures.

Continuous Security Testing

• Conduct external black-box penetration testing of internet-facing assets and internal penetration testing, including controlled Active Directory exploitation, to identify and validate weaknesses and demonstrate their impact within the approved scope.

• Perform cloud penetration testing and security assessments across Microsoft Azure and GCP environments, covering cloud infrastructure, configurations and access controls.

• Assess Wi-Fi configurations, authentication, access controls and network segregation, and evaluate kiosk configurations, access restrictions and exposure to unauthorised access, recommending appropriate corrective measures.

• Conduct security and vulnerability assessments of in-scope OT systems, including SCADA, Mitsubishi and Siemens environments, using approved methods that prioritise operational safety and availability.

• Assess vulnerabilities across active on-premises servers, cloud infrastructure, external IP addresses, network devices and approved OT networks; use Tenable VM to plan and execute scans, review coverage and analyse results, with manual validation where appropriate to reduce false positives.

• Prioritise vulnerabilities by severity, asset criticality, exposure and business impact; agree practical remediation actions with asset owners, track progress, perform retesting and document closure evidence or remaining risk in accordance with established procedures.

• Maintain assessment plans and testing records for consistent coverage and use Kali Linux and approved security testing tools to deliver repeatable assessments within agreed authorisation and operational constraints.

• Produce clear technical reports and management summaries covering assessment scope, evidence, business impact and remediation recommendations.

• Continuously improve testing practices, reporting quality and assessment efficiency, and share relevant technical knowledge with the team.

Be part of an extraordinary story

Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make.  You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future and build the life you want while being part of an international community.

Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before.

Together, everything is possible.

Qualification

We are looking for a passionate and experienced cyber security professional to join our Continuous Security Testing department. The ideal candidate will have the following qualifications and experience:

Essential

Bachelor’s degree in cyber security, information technology, computer science or a related field, with a minimum of 4 years of job-related experience.

• Penetration Testing Experience:

  • Practical experience conducting external black-box and internal infrastructure penetration testing.

  • Hands-on experience assessing Active Directory security and validating weaknesses through authorised testing.

  • Experience conducting cloud security assessments and penetration testing in Microsoft Azure and GCP environments.

• Vulnerability Assessment and Tools:

  • Hands-on experience using Tenable VM for vulnerability scanning, results analysis and remediation tracking.

  • Proficiency with Kali Linux and security testing tools for infrastructure and network assessments.

  • Experience assessing servers, network devices, external IP addresses and cloud infrastructure, including manual validation and retesting.

• Assessment Delivery and Reporting:

  • Experience defining assessment scope, following rules of engagement and coordinating testing with system owners.

  • Ability to produce evidence-based technical reports, explain business impact and recommend practical remediation.

  • Experience prioritising findings and validating remediation in collaboration with infrastructure, network and cloud teams.

Preferred

• Experience with aviation cyber security frameworks and security assessments across large, geographically dispersed technology environments.

• Hands-on OT assessment experience involving SCADA, Mitsubishi or Siemens systems.

• One or more of the following certifications:

  1. OffSec Certified Professional (OSCP / OSCP+)

  2. OffSec Experienced Penetration Tester (OSEP)

  3. Certified Red Team Operator (CRTO)

  4. Certified Red Team Lead (CRTL)

  5. Certified Azure Red Team Professional (CARTP)

Job-Specific Skills

Essential

• Strong technical knowledge of network security, Windows and Linux systems, Active Directory and cloud security in Azure and GCP.

• Ability to select appropriate testing methods, validate findings and assess risk without exceeding the authorised scope.

• Practical proficiency with Tenable VM and Kali Linux for vulnerability assessment and penetration testing.

• Understanding of wireless security, kiosk restrictions, infrastructure hardening and OT assessment considerations.

• Strong analytical judgement, attention to detail and ability to prioritise findings based on technical severity and business impact.

• Clear written and verbal communication, effective stakeholder coordination and disciplined handling of confidential assessment information.

   

About Qatar Airways Group:

Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We’ve grown fast, broken records and set trends that others follow. We don’t slow down by the fear of failure. Instead, we dare to achieve what’s never been done before. So, whether you’re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries and be part of a truly global community.

How to Apply

If you are interested in submitting your application and feel you are a good fit for this role, please complete our application form and upload your CV for our review and consideration.