Senior Cyber Security Analyst
Summary
Hands-on penetration tester on Qatar Airways' internal Continuous Security Testing team, running external black-box and internal pentests across Azure, GCP, Active Directory, Wi-Fi, OT/SCADA, kiosks and network devices, then documenting findings, prioritising risks and tracking remediation. Core tooling includes Kali Linux and Tenable VM.
About the Role
As a Senior Cyber Security Analyst within the Continuous Security Testing department, you will conduct hands-on penetration testing and vulnerability assessments to identify security weaknesses and help reduce cyber risk across Qatar Airways’ technology environment. Your scope will include external black-box testing, Microsoft Azure and Google Cloud Platform (GCP), internal infrastructure and Active Directory, Wi-Fi networks, operational technology (OT), kiosks, servers and network devices. You will communicate findings clearly, recommend practical remediation and validate corrective actions in collaboration with technology and business stakeholders.
Your duties will include:
Plan and deliver authorised security assessments in accordance with agreed scope, rules of engagement and testing schedules.
Document validated findings, assess business impact and recommend actionable, risk-prioritised remediation to technical and non-technical stakeholders.
Coordinate assessment activities with system owners, safeguard assessment evidence and support security and compliance reporting through established procedures.
Continuous Security Testing
Conduct external black-box penetration testing of internet-facing assets and internal penetration testing, including controlled Active Directory exploitation, to identify and validate weaknesses and demonstrate their impact within the approved scope.
Perform cloud penetration testing and security assessments across Microsoft Azure and GCP environments, covering cloud infrastructure, configurations and access controls.
Assess Wi-Fi configurations, authentication, access controls and network segregation, and evaluate kiosk configurations, access restrictions and exposure to unauthorised access, recommending appropriate corrective measures.
Conduct security and vulnerability assessments of in-scope OT systems, including SCADA, Mitsubishi and Siemens environments, using approved methods that prioritise operational safety and availability.
Assess vulnerabilities across active on-premises servers, cloud infrastructure, external IP addresses, network devices and approved OT networks; use Tenable VM to plan and execute scans, review coverage and analyse results, with manual validation where appropriate to reduce false positives.
Prioritise vulnerabilities by severity, asset criticality, exposure and business impact; agree practical remediation actions with asset owners, track progress, perform retesting and document closure evidence or remaining risk in accordance with established procedures.
Maintain assessment plans and testing records for consistent coverage and use Kali Linux and approved security testing tools to deliver repeatable assessments within agreed authorisation and operational constraints.
Produce clear technical reports and management summaries covering assessment scope, evidence, business impact and remediation recommendations.
Continuously improve testing practices, reporting quality and assessment efficiency, and share relevant technical knowledge with the team.
Be part of an extraordinary story
Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make. You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future and build the life you want while being part of an international community.
Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before.
Together, everything is possible.
