5 Penetration Testing Jobs in Qatar

Penetration Testing Jobs in Qatar is an activity that assesses how secure an application is. It involves using tools and software to check the security of an application and break through security barriers. A penetration tester can simulate the threat of malicious hackers and access a company’s internal systems.

Penetration testers use their analytical capabilities in information security testing. They should be able to work independently and run technology security tests. They should also know about operating systems, security methods, and best practices.

Job Overview

Cybersecurity experts are in high demand worldwide. Qatar has many jobs, such as cybersecurity analyst and vulnerability manager. These roles involve reporting and tracking studies.

For a management job, you need to have extensive knowledge of business and security technology. The position ensures that every vulnerability has a fix, and the company develops new tools to address security flaws.

Goals of the Job:

1. Internal penetration testing
2. Red Team Assessment

Key Responsibilities:

• Manage Network Access Control, firewalls, IPS/IDS systems, SIEM, EDR, email filters, etc.
• Set up attack tools, methods, and processes against authorized OISSG client infrastructure and use them safely.
• Develop scripts, tools, or plans to improve OISSG’s ability to conduct security testing.
• Perform tactical assessments that require knowledge of security (internal network) and threat research architecture for both internal and external networks.
• Work with various commercial and custom items.

Required Qualifications, Skills, and Experience:

3 to 5 years of experience as a VAPT consultant.
Certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, GXPN, CREST, or similar.
Experience with red teaming and internal VAPT drills.
Familiarity with attacks including golden SAML attacks and constraint transfer attacks.
Experience with network OS, Windows/*nix/MacOS, network communication protocols, virtual environments, cloud environments, mobile OS (Android/iOS), and containerized platforms.
Understanding of OWASP, the MITRE ATT&CK framework, and the software development lifecycle (SDLC).